Halo before 1.2.0-beta.1 allows Server Side Template Injection SSTI because TemplateClassResolver.SAFERRESOLVER is not used in the FreeMarker configuration...
7.2AI score0.01512EPSS
SaveExploits1References3
CNVD•added 2019/12/26 12:0 a.m.•4 views
Halo Code Issue Vulnerability
Halo is a personal blogging system. A security vulnerability exists in Halo versions prior to 1.2.0-beta.1. An attacker can exploit the vulnerability to execute commands...
