Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2020-19038: File Deletion vulnerability in Halo 0.4.3 via delBackup.
CVE-2020-19038 · published 5 years ago
Summary
File Deletion vulnerability in Halo 0.4.3 via delBackup.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| halo | halo |
0.4.3 cpe:2.3:a:halo:halo:0.4.3:*:*:*:*:*:*:* |
Original advisory text
File Deletion vulnerability in Halo 0.4.3 via delBackup.
File Deletion vulnerability in Halo 0.4.3 via delBackup.
References
- https://cwe.mitre.org/data/definitions/23.html Third Party Advisory
- https://github.com/halo-dev/halo/issues/136 Exploit Issue Tracking Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-862Missing Authorization
Timeline
Published12 Jul 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-19038 · NVD
Track software like this
Free during beta