CyberRota Analysis
AI-GeneratedThe vulnerability affects the Java component in halo-dev versions up to 2.24.2, specifically in the Download function of the MigrationEndpoint.java file, allowing for path traversal attacks. This could enable an attacker to access sensitive files on the server remotely. Organizations using the affected versions should prioritize patching this vulnerability to mitigate potential data exposure risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in halo-dev halo up to 2.24.2. Affected by this vulnerability is the function Download of the file MigrationEndpoint.java of the component Files Backup Endpoint. Performing a manipulation results in path traversal. The attack is possible to be carried out remotely. The exploit is now public and may be used.