Halo

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.

Published: 2020-09-30T14:47:24.000Z
Updated: 2024-08-04T14:30:33.155Z

An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.

Published: 2020-09-30T14:43:02.000Z
Updated: 2024-08-04T14:30:33.198Z

Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.

Published: 2020-09-30T14:38:01.000Z
Updated: 2024-08-04T14:30:33.113Z

A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arbitrary code execution when it is rendered in the background. exp: <#assign test="freemarker.template.utility.Execute"?new()> ${test("touch /tmp/freemarkerPwned")}

Published: 2020-09-30T14:29:51.000Z
Updated: 2024-08-04T14:30:33.220Z

An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system.

Published: 2020-09-30T14:26:14.000Z
Updated: 2024-08-04T14:30:33.398Z