2026年9月4日

CVE-2026-67921 [CRITICAL] – Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 v

未分类

📑 文章目录

Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigurer.java components. This allows a remote attacker to execute arbitrary code.

相关文章