CVE-2025-44595

Description

Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.

PUBLISHED Reserved 2025-04-22 | Published 2025-09-09 | Updated 2025-09-10 | Assigner mitre

References

meadow-horn-b94.notion.site/...42bd5b118808ba6f2c199a65bb42d

cve.org (CVE-2025-44595)

nvd.nist.gov (CVE-2025-44595)

Download JSON