CVE-2022-26619

Description

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

Affected Platforms

Weakness Type

CWE-434

References

• https://github.com/halo-dev/halo/issues/1702
• https://github.com/halo-dev/halo/issues/1702