PT-2021-10272

Name of the Vulnerable Software and Affected Versions: Halo version 0.4.3 Description: The issue allows a malicious user to bypass encryption and view encrypted articles via cookies, due to an Incorrect Access Control vulnerability. Recommendations: For Halo version 0.4.3, update to a version tha...

CVE-2020-19037: Improper Authentication

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...