CNNVD-202509-1194 Information
Sep 09, 2025
cve
CNNVD ID
CNNVD-202509-1194
Related CVE
- CNNVD Published: 2025-09-09
Description (Chinese)
Halo是Halo开源的一个强大易用的开源建站工具。 Halo v2.20.17及之前版本存在安全漏洞，该漏洞源于服务端请求伪造，可能导致上传恶意文件。
Description (English)
Halo is a powerful and easy-to-use open-source construction tool for Halo. Haro v2.20.17 and earlier versions had a security loophole, which originated in a service-level request for forgery and could lead to the uploading of malicious documents.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Hamilton-medical
Published
2025-09-09
Last Modified
2026-02-24
References
https://meadow-horn-b94.notion.site/halo-ssrf-14c42bd5b11880c09936df07f58f5bed?pvs=74 https://access.redhat.com/security/cve/cve-2025-44594