high7.7
CVE-2020-21527
There is an Arbitrary file deletion vulnerability in halo v1.1.3.
Impact
There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delete any files on the system through directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Halo | Halo | Version 1.1.3 |