CVE-2022-32995

2022-06-2723:15:08

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

CPENameOperatorVersion
haloeq1.3.0-beta.3
haloeq0.0.7
haloeq1.5.0-alpha.2
haloeq1.2.0-beta.3
haloeq1.0.0-beta.6
haloeq1.3.0
haloeq1.4.7
haloeq0.0.9
haloeq0.2.0
haloeq1.5.0

Name	Operator	Version
halo	eq	1.3.0-beta.3
halo	eq	0.0.7
halo	eq	1.5.0-alpha.2
halo	eq	1.2.0-beta.3
halo	eq	1.0.0-beta.6
halo	eq	1.3.0
halo	eq	1.4.7
halo	eq	0.0.9
halo	eq	0.2.0
halo	eq	1.5.0

Rows per page:

1-10 of 801

References

github.com/zongdeiqianxing/cve-reports/issues/2