CVE-2020-21524

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not used for security defense, This vulnerability can detect the intranet, read files, enable ddos attacks, etc. exp:https://github.com/halo-dev/halo/issues/423

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published: Sep 30, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-215257.5Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performe CVE-2020-215269.8An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is per CVE-2020-215277.7There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their bac CVE-2020-215285.5A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a d CVE-2020-215295.5fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.CVE-2020-21534.3Jenkins Backlog Plugin 2.4 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially result CVE-2020-215305.5fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.CVE-2020-215315.5fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.CVE-2020-215325.5fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.CVE-2020-215335.5fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.CVE-2020-215345.5fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.CVE-2020-215355.5fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.