CVE-2025-70886 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint
High CVSS: 7.5

CVE-2025-70886

An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submission endpoint
Vendor
Halo
Product
Halo
CWE
CWE-400
Yayın Tarihi
2026-02-12 16:16:05
Güncelleme
2026-02-18 15:45:23
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-400 Halo HIGH Halo 2026

Referanslar

https://github.com/HowieHz/CVE-2025-70886 https://github.com/halo-dev/halo/issues/7890 https://howiehz.top/archives/halo-comment-payload-tweaker