Rekczh

A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.

**Name of the Vulnerable Software and Affected Versions** MyEMS versions prior to 6.5.0 **Description** An issue exists in the Admin Backend component within the `on post()` function of the `myems-api/core/svg.py` file. Remote attackers can trigger cross-site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the `new values['data']` variable. **Recommendations** Upgrade to version 6.5.0.

**Name of the Vulnerable Software and Affected Versions** halo-dev halo versions prior to 2.24.3 **Description** A path traversal issue exists in the Theme Installation component within the `ThemeUtils.unzipThemeTo()` function of the `ThemeUtils.java` file. This occurs when the `metadata.name` argument is manipulated, allowing a remote attacker to perform path traversal, which is a method used to access files and directories that are stored outside the intended folder. **Recommendations** Update halo-dev halo to a version newer than 2.24.2. As a temporary mitigation, restrict the use of the `ThemeUtils.unzipThemeTo()` function until the update is applied.