Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-23079
7.5
HIGHCVSS v3
Published
July 12, 2021
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet.
halo-dev/halo
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。<= 1.3.2NVD