CVE-2023-41009

CriticalCVSS 9.8

Published: 05/09/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.37%

69th percentile - higher than 69% of all known CVEs

Summary

A file upload vulnerability in bolo-solo version 2.6 allows a remote attacker to execute arbitrary code by sending a crafted script in the authorization header. This can lead to full server compromise.

Risk Assessment

The organization risks complete server takeover, data theft, and potential lateral movement within the internal network.

Recommendation

Immediately upgrade bolo-solo to the latest patched version. As a temporary measure, restrict access to the system and implement HTTP header filtering.

Original NVD description (English source)

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header.