Security Advisory

CVE-2020-21525

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-30 14:38:01

Last updated 2024-08-04 14:30:33

Assigner mitre

State PUBLISHED

Description

Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.

← Browse all CVEs View on cve.org ↗