CVE-2020-21525

Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.

• CWE-22

• https://github.com/halo-dev/halo/issues/420Exploit, Issue Tracking, Third Party Advisory
• https://github.com/halo-dev/halo/issues/420Exploit, Issue Tracking, Third Party Advisory

Published

Sep 30, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-21516There is an arbitrary file upload vulnerability in FeehiCMS …9.8
• CVE-2020-21517Cross Site Scripting (XSS) vulnerability in MetInfo 7.0.0 vi…6.1
• CVE-2020-2152Jenkins Subversion Release Manager Plugin 1.2 and earlier do…6.1
• CVE-2020-21522An issue was discovered in halo V1.1.3. A Zip Slip Directory…9.8
• CVE-2020-21523A Server-Side Freemarker template injection vulnerability in…9.8
• CVE-2020-21524There is a XML external entity (XXE) vulnerability in halo v…9.1
• CVE-2020-21526An Arbitrary file writing vulnerability in halo v1.1.3. In a…9.8
• CVE-2020-21527There is an Arbitrary file deletion vulnerability in halo v1…7.7
• CVE-2020-21528A Segmentation Fault issue discovered in in ieee_segment fun…5.5
• CVE-2020-21529fig2dev 3.2.7b contains a stack buffer overflow in the bezie…5.5
• CVE-2020-2153Jenkins Backlog Plugin 2.4 and earlier transmits configured …4.3
• CVE-2020-21530fig2dev 3.2.7b contains a segmentation fault in the read_obj…5.5