Fit2cloud

Halo

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2025-14117

Exploit
  • EPSS 0.02%
  • Veröffentlicht 06.12.2025 05:32:06
  • Zuletzt bearbeitet 08.12.2025 18:26:49

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The v...

4.8

CVE-2022-28074

  • EPSS 0.22%
  • Veröffentlicht 22.04.2022 14:15:09
  • Zuletzt bearbeitet 21.11.2024 06:56:43

Halo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin\index.html#/system/tools.

5.4

CVE-2022-22123

Exploit
  • EPSS 0.3%
  • Veröffentlicht 13.01.2022 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:46:13

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the article title. An authenticated attacker can inject arbitrary javascript code that will execute on a victim’s server.

3.5

CVE-2022-22124

Exploit
  • EPSS 0.36%
  • Veröffentlicht 13.01.2022 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:46:13

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s brows...