CVE-2023-41009

Critical · CVSS 9.8

adlered bolo-solo — Unrestricted File Upload RCE (CWE-434)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-434

Description

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the authorization field in the header.

Search profile — drives PoC discovery

Symbols authorizationbolo-solofile uploadheader authorization fieldcrafted scriptadlered

Keywords CVE-2023-41009bolo-solo file uploadadlered bolo-solo RCEbolo-solo arbitrary code executionbolo-solo authorization header exploitCWE-434 bolo-solobolo-solo v2.6 vulnerabilityRabb1tQ HillstoneCVEs

Versions: v2.6

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Rabb1tQ/HillstoneCVEs candidate

cited in references

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z