CVE-2020-21526

CVE-2020-21526 affects halo v1.1.3. The vulnerability is an arbitrary file writing issue where a directory traversal check on the input path parameter can be bypassed via the startsWith function in the background file-writing interface. This results in potential unauthorized file writes with part...