CVE-2022-32994

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload...

CVE-2022-32994: Unrestricted Upload of File with Dangerous Type

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload...

PT-2022-21628

Name of the Vulnerable Software and Affected Versions Halo CMS version 1.5.3 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the /api/admin/attachments/upload API endpoint. Recommendations For Halo CMS version 1.5.3, consider...