CVE-2025-44594

概要

参考情報

• meadow-horn-b94.notion.site/halo-ssrf-14c42bd5b11880c09936df07f58f5bed · Broken Link

halo のその他の脆弱性

• CVE-2025-70886高 7.5An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submi…
• CVE-2025-15141低 3.1A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Conf…
• CVE-2025-44595中 6.1Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.
• CVE-2025-44593中 6.1Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html f…
• CVE-2024-56156緊急 9.0Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validat…