Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-22124

In Halo, versions v1.0.0 to v1.4.17 (latest) are vulnerable to Stored Cross-Site Scripting (XSS) in the profile image. An authenticated attacker can upload a carefully crafted SVG file that will trigger arbitrary javascript to run on a victim’s browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 49.3%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2022-22124
  • Fit2cloud » Halo » Version: 1.0.0
    cpe:2.3:a:fit2cloud:halo:1.0.0
  • Fit2cloud » Halo » Version: 1.0.1
    cpe:2.3:a:fit2cloud:halo:1.0.1
  • Fit2cloud » Halo » Version: 1.0.2
    cpe:2.3:a:fit2cloud:halo:1.0.2
  • Fit2cloud » Halo » Version: 1.0.3
    cpe:2.3:a:fit2cloud:halo:1.0.3
  • Fit2cloud » Halo » Version: 1.1.0
    cpe:2.3:a:fit2cloud:halo:1.1.0
  • Fit2cloud » Halo » Version: 1.1.1
    cpe:2.3:a:fit2cloud:halo:1.1.1
  • Fit2cloud » Halo » Version: 1.1.3
    cpe:2.3:a:fit2cloud:halo:1.1.3
  • Fit2cloud » Halo » Version: 1.2.0
    cpe:2.3:a:fit2cloud:halo:1.2.0
  • Fit2cloud » Halo » Version: 1.3.0
    cpe:2.3:a:fit2cloud:halo:1.3.0
  • Fit2cloud » Halo » Version: 1.3.1
    cpe:2.3:a:fit2cloud:halo:1.3.1
  • Fit2cloud » Halo » Version: 1.3.2
    cpe:2.3:a:fit2cloud:halo:1.3.2
  • Fit2cloud » Halo » Version: 1.4.0
    cpe:2.3:a:fit2cloud:halo:1.4.0
  • Fit2cloud » Halo » Version: 1.4.1
    cpe:2.3:a:fit2cloud:halo:1.4.1
  • Fit2cloud » Halo » Version: 1.4.10
    cpe:2.3:a:fit2cloud:halo:1.4.10
  • Fit2cloud » Halo » Version: 1.4.11
    cpe:2.3:a:fit2cloud:halo:1.4.11
  • Fit2cloud » Halo » Version: 1.4.12
    cpe:2.3:a:fit2cloud:halo:1.4.12
  • Fit2cloud » Halo » Version: 1.4.13
    cpe:2.3:a:fit2cloud:halo:1.4.13
  • Fit2cloud » Halo » Version: 1.4.14
    cpe:2.3:a:fit2cloud:halo:1.4.14
  • Fit2cloud » Halo » Version: 1.4.15
    cpe:2.3:a:fit2cloud:halo:1.4.15
  • Fit2cloud » Halo » Version: 1.4.16
    cpe:2.3:a:fit2cloud:halo:1.4.16
  • Fit2cloud » Halo » Version: 1.4.17
    cpe:2.3:a:fit2cloud:halo:1.4.17
  • Fit2cloud » Halo » Version: 1.4.2
    cpe:2.3:a:fit2cloud:halo:1.4.2
  • Fit2cloud » Halo » Version: 1.4.3
    cpe:2.3:a:fit2cloud:halo:1.4.3
  • Fit2cloud » Halo » Version: 1.4.4
    cpe:2.3:a:fit2cloud:halo:1.4.4
  • Fit2cloud » Halo » Version: 1.4.5
    cpe:2.3:a:fit2cloud:halo:1.4.5
  • Fit2cloud » Halo » Version: 1.4.6
    cpe:2.3:a:fit2cloud:halo:1.4.6
  • Fit2cloud » Halo » Version: 1.4.7
    cpe:2.3:a:fit2cloud:halo:1.4.7
  • Fit2cloud » Halo » Version: 1.4.8
    cpe:2.3:a:fit2cloud:halo:1.4.8
  • Fit2cloud » Halo » Version: 1.4.9
    cpe:2.3:a:fit2cloud:halo:1.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved