Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-26619
7.5
HIGHCVSS v3
Published
April 5, 2022
CVSS v2
5 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.
halo-dev/halo
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。= 1.4.17NVD