| Package | Affected versions | Patched versions |
|---|---|---|
| halo | = 1.1.3 |
Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free