VYPR
← All advisories
High severity8.0NVD Advisory· Published Aug 6, 2024· Updated Jun 17, 2026

CVE-2024-6200

CVE-2024-6200

Description

HaloITSM versions up to 2.146.1 are affected by a Stored Cross-Site Scripting (XSS) vulnerability. The injected JavaScript code can execute arbitrary action on behalf of the user accessing a ticket. HaloITSM versions past 2.146.1 (and patches starting from 2.143.61 ) fix the mentioned vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • HaloITSM/HaloITSMllm-fuzzy
    Range: <=2.146.1
  • Halo Service Solutions/HaloITSMv5
    Range: < 2.146.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.