CVE-2023-33528

Mô tả

Tham khảo

• gist.github.com/alert-moyan/be0bd087d85c1416829b8e9659e8b66c · Third Party Advisory
• halo-dev/halo release v1.6.0 · Release Notes

Lỗ hổng khác của halo

• CVE-2025-70886CAO 7.5An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submi…
• CVE-2025-15141THẤP 3.1A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Conf…
• CVE-2025-44595TRUNG BÌNH 6.1Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.
• CVE-2025-44593TRUNG BÌNH 6.1Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html f…
• CVE-2025-44594NGHIÊM TRỌNG 9.1halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-…