Threats tagged 'ghsa-j2q6-4wwg-vm5c'

A Server-Side Request Forgery (SSRF) vulnerability exists in the /themes/-/install-from-uri endpoint of halo version 2.22.14. This flaw allows authenticated attackers to send crafted GET requests that can scan internal resources. The vulnerability has a medium severity rating with a CVSS score of 4.3. There is no information about available patches or fixed versions at this time.