EUVD-2020-10945

Malware in sbrugna...

Halo file deletion vulnerability

Halo is a light, clean and powerful Java blogging system. Halo version 0.4.3 is vulnerable to file deletion. An attacker can use this vulnerability to delete arbitrary files via delBackup...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

Arbitrary file deletion

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

File Deletion vulnerability in Halo 0.4.3 via delBackup...

CVE-2020-19038

CVE-2020-19038 affects Halo version 0.4.3 and is described as a File Deletion vulnerability via the delBackup function. The connected documents consistently identify Halo 0.4.3 as vulnerable to arbitrary file deletion through delBackup, indicating a flaw in the handling of that function. The root...

PT-2021-10273 · Halo · Halo

Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: A File Deletion issue exists via the delBackup function. Recommendations: For Halo version 0.4.3, consider restricting access to the delBackup function as a temporary workaround until a patch is available...