Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-27164
4.8
MEDIUMCVSS v3
Published
March 10, 2023
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.
halo-dev/halo
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。<= 1.6.1NVD