8.5
CVSSv2

CVE-2020-21527

Published: 30/09/2020 Updated: 07/10/2020
CVSS v2 Base Score: 8.5 | Impact Score: 9.2 | Exploitability Score: 8
CVSS v3 Base Score: 7.7 | Impact Score: 4 | Exploitability Score: 3.1
VMScore: 756
Vector: AV:N/AC:L/Au:S/C:N/I:C/A:C

Vulnerability Summary

There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

halo halo 1.1.3