high7.5
CVE-2025-70886
An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint
Impact
An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Halo | Halo | through 2.22.4 |