Skip to content
OpenAdvisories
Unscored CVE-2020-21525 EUVD-2020-14293GHSA-5p4c-gjhv-hc8c

Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is perform…

Published Sep 30, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.

References