Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-6201

HaloITSM - Emailing Template Injection

Description

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive information. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Halo Service Solutions HaloITSM

Default version status: unaffected

  • < 2.146.1affected

References