---
id: 8974
title: "Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM"
source_domain: slcyber.io
source_url: "https://www.slcyber.io/research/loose-types-sink-ships-pre-authentication-sql-injection-in-halo-itsm"
published_at: "2025-04-02T00:00:00Z"
tags: ["vulnerability-research", "sql-injection"]
phying_url: "https://phying.com/item/8974"
lang: en
---

# Loose Types Sink Ships: Pre-Authentication SQL Injection in Halo ITSM

## Summary

Assetnote discovers a pre-authentication SQL injection vulnerability in Halo ITSM, exploitable due to loose type handling in the codebase.

## Intelligence Metadata

- **Sources:** slcyber.io
- **Published:** 2025-04-02T00:00:00Z
- **Original:** https://www.slcyber.io/research/loose-types-sink-ships-pre-authentication-sql-injection-in-halo-itsm
- **Phying News:** https://phying.com/item/8974