Arron-bit/Vul_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-36757 ↗	Apr 30, 2026Thursday, 30 April 2026, 17:16	4.3 MEDIUM	—
A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.
CVE-2026-36756 ↗	Apr 30, 2026Thursday, 30 April 2026, 16:16	5.4 MEDIUM	—
A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.
CVE-2026-36758 ↗	Apr 30, 2026Thursday, 30 April 2026, 16:16	4.3 MEDIUM	—
A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.
CVE-2026-36759 ↗	Apr 30, 2026Thursday, 30 April 2026, 16:16	6.5 MEDIUM	—
A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.