PT-2024-37448 · Haloitsm · Haloitsm

Name of the Vulnerable Software and Affected Versions: HaloITSM versions up to 2.146.1 Description: The issue allows malicious actors to send poisoned password reset links to existing users, given their email address is known. When these links are accessed, the password reset token is leaked,...