Advisories · Technology
halo.
Every CVE that names halo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal
- halo
- Path traversal
- CVSS 6.9 Medium
halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization
- Halo
- CWE-20
- CWE-707
- CVSS 5.3 Medium
Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter
- halo
- Open redirect
- CVSS 5.1 Medium
halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal
- halo
- Path traversal
- CVSS 5.1 Medium
halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal
- halo
- Path traversal
- CVSS 5.5 Medium
Halo: Path Traversal in Backup Download Leads to Arbitrary File Read
- halo
- Path traversal
- CVSS 2.3 Low
Halo Configuration actuator information disclosure
- Halo
- Information disclosure
- Broken access control
- CVSS 5.5 Medium
Halo Vulnerable to Stored XSS and RCE via File Upload Bypass
- halo
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Halo's editor has a stored XSS vulnerability
- halo
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
Halo's editor has a stored Cross-Site Scripting vulnerability
- halo
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag
- halo
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image
- halo
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title
- halo
- Cross-site scripting (XSS)