CVE-2025-70886

Beschreibung

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://github.com/halo-dev/halo/issues/7890 ExploitIssue TrackingVendor Advisory
• https://howiehz.top/archives/halo-comment-payload-tweaker ExploitThird Party Advisory
• https://github.com/HowieHz/CVE-2025-70886 ExploitThird Party Advisory