CVE-2022-32994

Publication date

2022-06-27 22:15:38

Family

mitre

State

PUBLISHED

Description

Halo CMS v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the component /api/admin/attachments/upload.