Vulnerability · Published May 8, 2025 · Assigned by NCSC.ch

CVE-2025-40846HaloITSM open redirect via the returnUrl

High 7.1

In plain English

A high-severity improper input validation in ITSM from HaloITSM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 4.0)7.1High

Exploit odds (30 days)0.4%top 70.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing attackers to redirect users to malicious websites (Open Redirect) and inject JavaScript code to perform cross site scripting attack. The vulnerability affects Halo versions up to 2.174.101 and all versions between 2.175.1 and 2.184.21

Affected products (as reported)

Vendor	Product	Versions
HaloITSM	ITSM	see references

Weakness: CWE-20, CWE-601 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:L/VA:N/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/RE:L/U:Red

References

https://support.haloservicedesk.com/kb?id=2501 vendor-advisory