Vulnerability feed

Executive summary

A path traversal flaw has been reported in halo-dev Halo, a content management system, in versions up to 2.27.0-beta.1. A public exploit has been published and may be used, and the advisory says the vendor did not respond to early disclosure contact. The advisory does not state a severity score or a fix.

Technical summary

The flaw is a path traversal in the view name resolver function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault, in application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.java. It is triggered by manipulating the template argument, and the advisory says the attack may be launched remotely. A published exploit exists and may be used. The affected version range is stated as up to 2.27.0-beta.1. A fixed version is not stated, no workaround is stated, no CVSS score is stated, and no detection guidance is stated. The vendor did not respond to early disclosure contact, so an official patch may not be available.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

None

User interaction

None

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affects

halo-devhalo-dev halo