CVE-2022-32994
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com