CVE-2022-32995: Halo

Critical severity, CVSS 9.8. EPSS: 17.6% chance of exploitation in the next 30 days.

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

Affected products

• Halo Halo: version 1.5.3 only

Published 2022-06-27. Last modified 2026-06-17.