Cross-site request forgery in fit2cloud Halo 2.21.10 allows remote attackers to perform unauthorized actions on behalf of authenticated users. A publicly available proof-of-concept exploit exists, though no active exploitation has been confirmed. The vendor was contacted but did not respond, leaving the vulnerability unpatched.
CSRF
Halo
Fit2Cloud
NVD
GitHub
VulDB
CVSS 4.0
2.1
EPSS
0.1%