Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112898.json"