Privilege escalation

2023-03-1016:15:00

PRIOn knowledge base

www.prio-n.com

privilege escalation

file upload vulnerability

halo v1.6.1

arbitrary code execution

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.

CPENameOperatorVersion
halole1.6.1

CPE	Name	Operator	Version
	halo	le	1.6.1

References

halo.com

gist.github.com/b33t1e/a1a0d81b1173d0d00de8f4e7958dd867

github.com/halo-dev/halo

notes.sjtu.edu.cn/s/s5oEvs-p5