CVE-2022-31321: Boltcms Bolt

Critical severity, CVSS 9.1. EPSS: 0.9% chance of exploitation in the next 30 days.

The foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation, allowing attackers to perform directory enumeration or cause a Denial of Service (DoS) via a crafted input.

Affected products

• Boltcms Bolt: up to and including 5.7

Published 2022-08-01. Last modified 2026-07-09.