← Database

CVE-2026-67921

N/A CVSS: N/A Published: 2026-08-18 Modified: 2026-08-18

Description

Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.

Affected Platforms

Unknown

Weakness Type

Unknown

References