| Название | Halo 2.21.10 Exposure of Sensitive Information Due to Incompatible Policies |
|---|
| Описание | In the Halo release version (currently the latest is 2.21.10), due to improper Spring actuator endpoint configurations that are also unnecessary for business operations, multiple sensitive endpoints (such as env, heapdump, logfile, etc.) are exposed, potentially resulting in the leakage of sensitive information. |
|---|
| Источник | ⚠️ https://github.com/SECWG/cve/issues/9 |
|---|
| Пользователь | WenGui (UID 82184) |
|---|
| Представление | 14.12.2025 14:38 (10 месяцы назад) |
|---|
| Модерация | 27.12.2025 11:18 (13 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 338519 [Halo до 2.21.10 Configuration /actuator раскрытие информации] |
|---|
| Баллы | 18 |
|---|