Security Advisory

CVE-2021-43659

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-24 13:09:12
Last updated 2024-08-04 04:03:08
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as uploading an HTML file, which will cause a stored XSS vulnerability.