An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.

Published Mar 10, 2023 · Updated Jul 9, 2026 · Assigned by mitre