Arbitrary file deletion

2020-09-3018:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.9%

JSON

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.

CPENameOperatorVersion
haloeq1.1.3

CPE	Name	Operator	Version
	halo	eq	1.1.3

References

github.com/halo-dev/halo/issues/422