AIKIDO-2026-137351
bolt/core is vulnerable to Open Redirect
50
Medium Risk
This Affects:
bolt/coreTL;DR
The backend bulk-operations controller builds its post-action redirect directly from the incoming Referer request header without validating if the target is a local URL. A backend user can submit a bulk status change or delete from an externally hosted page and be redirected to an arbitrary domain after the operation completes. The fix routes the redirect through Symfony's HTTP utilities so only validated targets are used.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you have authenticated backend users who can trigger a bulk content operation.
Background info
bolt/core is vulnerable to Open Redirect in versions 4.0.0 - 6.1.6.
How to fix this
Upgrade the bolt/core library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant