Hardcoded credentials

2022-04-0501:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

33.9%

Halo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the Attachment Upload function.

CPENameOperatorVersion
haloeq1.4.17

CPE	Name	Operator	Version
	halo	eq	1.4.17

References

github.com/halo-dev/halo/issues/1702

0.001 Low

EPSS

Percentile

33.9%

Related for PRION:CVE-2022-26619