PT-2020-15368 · Halo · Halo

Any-How · Published 2020-09-30 · Updated 2020-10-07 · CVE-2020-21526

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions halo version 1.1.3

Description The issue concerns an arbitrary file writing vulnerability. It involves a directory traversal check on the input path parameter in an interface designed to write files in the background. However, this check can be bypassed using the startsWith function.

Recommendations For version 1.1.3, consider restricting access to the file writing interface until a patch is available. As a temporary workaround, review and validate all input paths to prevent directory traversal attacks.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-21526

Affected Products

Halo

References · 3

• 🔥 https://github.com/halo-dev/halo/issues/421 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-21526 · Security Note
• https://osv.dev/vulnerability/CVE-2020-21526 · Vendor Advisory