Vulnerabilities

TI-2026-80250 CVE-2026-116117 · GHSA-jxv2-266f-6xgq

Path traversal in halo-dev Halo view name resolver

LOW 37

A flaw has been found in halo-dev halo up to 2.27.0-beta.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00502 Published 2026-10-26 No fix listed CWE-22

TI-2026-63962 CVE-2026-97182 · GHSA-mpvm-cxq8-g78g

halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

HIGH 70

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00374 Published 2026-09-24 No fix listed CWE-20

TI-2026-61983 CVE-2026-91772 · GHSA-fvx2-w6cp-9mrg

Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter

MEDIUM 57

Halo through 2.26.1 contains an open redirect vulnerability in the anonymous thumbnail endpoint that fails to validate the uri query parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0032 Published 2026-09-15 No fix listed CWE-601

TI-2026-13466 CVE-2026-16088 · GHSA-mrpc-g9pq-2433

halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal

MEDIUM 56

A vulnerability was detected in halo-dev halo up to 2.24.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00486 Published 2026-07-18 No fix listed CWE-22

TI-2026-12899 CVE-2026-15326 · GHSA-9p22-639x-ghp4

halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal

MEDIUM 56

A vulnerability was identified in halo-dev halo up to 2.24.2.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00537 Published 2026-07-10 No fix listed CWE-22

TI-2026-40007 CVE-2026-55439

Halo: Path Traversal in Backup Download Leads to Arbitrary File Read

MEDIUM 58

Halo is an open source website building tool.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00413 Published 2026-06-25 Fixed in 2.24.3 CWE-22

TI-2025-43155 CVE-2025-70886 · GHSA-7p49-g593-x646

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of…

HIGH 72

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00524 Published 2026-02-12 No fix listed CWE-400

TI-2025-13819 CVE-2025-15141 · GHSA-9mf8-q5hw-h59m

Halo Configuration actuator information disclosure

MEDIUM 45

A vulnerability was determined in Halo up to 2.21.10.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00253 Published 2025-12-28 No fix listed CWE-200

TI-2025-28628 CVE-2025-44595 · GHSA-mx5p-m7gp-h79c

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

LOW 27

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00237 Published 2025-09-09 No fix listed CWE-79

TI-2025-28627 CVE-2025-44594 · GHSA-m32r-7fmp-xpvf

halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in…

HIGH 78

halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00373 Published 2025-09-09 No fix listed CWE-918

TI-2025-28626 CVE-2025-44593 · GHSA-c59h-v3mp-r47h

Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files…

LOW 27

Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00257 Published 2025-09-09 No fix listed CWE-79

TI-2024-37139 CVE-2024-56156

Halo Vulnerable to Stored XSS and RCE via File Upload Bypass

LOW 28

Halo is an open source website building tool.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00827 Published 2025-04-25 Fixed in 2.20.13 CWE-79

TI-2024-29387 CVE-2024-43793

Halo's editor has a stored XSS vulnerability

MEDIUM 64

Halo is an open source website building tool.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00325 Published 2024-09-11 Fixed in 2.19.0 CWE-79

TI-2024-29386 CVE-2024-43792

Halo's editor has a stored Cross-Site Scripting vulnerability

MEDIUM 61

Halo is an open source website building tool.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00351 Published 2024-09-02 Fixed in 2.17.0 CWE-79

TI-2023-16564 CVE-2023-33528 · GHSA-wwmq-47hw-c7vw

halo v1.6.0 is vulnerable to Cross Site Scripting (XSS).

LOW 27

halo v1.6.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00311 Published 2024-03-28 No fix listed CWE-79

TI-2023-11953 CVE-2023-27164 · GHSA-29h6-7mm5-5wf8

An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute…

LOW 23

An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00687 Published 2023-03-10 No fix listed CWE-434

TI-2022-14504 CVE-2022-32995 · GHSA-qrgv-2pf8-vgqg

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the…

MEDIUM 59

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17629 Published 2022-06-27 No fix listed CWE-918

TI-2022-14503 CVE-2022-32994 · GHSA-6mpm-3752-992x

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the…

MEDIUM 60

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18539 Published 2022-06-27 No fix listed CWE-434

TI-2022-09902 CVE-2022-26619 · GHSA-xxhr-8f54-6m66

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

LOW 35

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00881 Published 2022-04-05 No fix listed CWE-434

TI-2021-19500 CVE-2021-43659 · GHSA-hgpr-6pp6-qx23

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded…

LOW 25

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2022-03-24 No fix listed CWE-79

TI-2022-06469 CVE-2022-22125 · GHSA-3g85-r6x7-j7mx

Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag

LOW 24

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article tag.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00856 Published 2022-01-13 No fix listed CWE-79

TI-2022-06468 CVE-2022-22124 · GHSA-g7vj-x88g-9f9w

Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image

LOW 26

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00731 Published 2022-01-13 No fix listed CWE-79

TI-2022-06467 CVE-2022-22123 · GHSA-66cp-6j7w-r93f

Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title

LOW 26

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00731 Published 2022-01-13 No fix listed CWE-79

TI-2020-13516 CVE-2020-19038 · GHSA-24cp-rv65-qm42

File Deletion vulnerability in Halo 0.4.3 via delBackup.

MEDIUM 42

File Deletion vulnerability in Halo 0.4.3 via delBackup.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01168 Published 2021-07-12 No fix listed CWE-862

TI-2020-13515 CVE-2020-19037 · GHSA-wprp-jm6r-6w3q

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to…

LOW 26

Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00886 Published 2021-07-12 No fix listed CWE-287

Vulnerabilities

Filters