Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-32994
9.8
CRITICALCVSS v3
Published
June 27, 2022
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.
GitHub