CVE-2023-27164

CVE-2023-27164 affects Halo up to v1.6.1 with an arbitrary file upload in .md files that can lead to arbitrary code execution. Documents confirm the vulnerability and affected versions; no exploitation details are provided. Remediation guidance appears in PT-2023-20983: upgrade to a version later...

CVE-2023-27164

An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file...