Gửi #853064: halo <=2.24.2 Arbitrary File Write(AFW)thông tin

tiêu đềhalo <=2.24.2 Arbitrary File Write(AFW)
Mô tảhttps://github.com/halo-dev/halo I first reported this vulnerability privately via email approximately 30 days ago. As the project author has not responded, I am now proceeding with public disclosure via this GitHub Issue and would like to request a CVE ID for this vulnerability. The detailed vulnerability information has been submitted to this project's Issues. Please review it at the following link: https://github.com/halo-dev/halo/issues/10062
Nguồn⚠️ https://github.com/halo-dev/halo/issues/10062
Người dùng
 rekczh (UID 98239)
Đệ trình09/06/2026 16:09 (cách đây 1 tháng)
Kiểm duyệt09/07/2026 20:20 (1 month later)
Trạng tháiđược chấp nhận
Mục VulDB377265 [halo-dev halo đến 2.24.2 Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo metadata.name duyệt thư mục]
điểm20

Do you want to use VulDB in your project?

Use the official API to access entries easily!