Threats tagged 'ghsa-hm4q-m6g4-9xrr'

A Server-Side Request Forgery (SSRF) vulnerability exists in the /plugins/{name}/upgrade-from-uri endpoint of halo version 2.22.14. This flaw allows authenticated attackers to send crafted GET requests that can scan internal resources. The vulnerability has a medium severity rating with a CVSS score of 4.3. No patch or remediation information is currently provided.