Rekczh

**Name of the Vulnerable Software and Affected Versions** halo-dev halo versions prior to 2.24.3 **Description** A path traversal issue exists in the Files Backup Endpoint component within the `Download()` function of the `MigrationEndpoint.java` file. This flaw allows a remote attacker to perform manipulations that enable unauthorized access to files and directories outside the intended folder. **Recommendations** Update halo-dev halo to version 2.24.3 or later. As a temporary mitigation, restrict access to the `Download()` function in the `MigrationEndpoint.java` file.

**Name of the Vulnerable Software and Affected Versions** MyEMS versions prior to 6.5.0 **Description** An issue exists in the Admin Backend component within the `on post()` function of the `myems-api/core/svg.py` file. Remote attackers can trigger cross-site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the `new values['data']` variable. **Recommendations** Upgrade to version 6.5.0.

**Name of the Vulnerable Software and Affected Versions** halo-dev halo versions prior to 2.24.3 **Description** A path traversal issue exists in the Theme Installation component within the `ThemeUtils.unzipThemeTo()` function of the `ThemeUtils.java` file. This occurs when the `metadata.name` argument is manipulated, allowing a remote attacker to perform path traversal, which is a method used to access files and directories that are stored outside the intended folder. **Recommendations** Update halo-dev halo to a version newer than 2.24.2. As a temporary mitigation, restrict the use of the `ThemeUtils.unzipThemeTo()` function until the update is applied.