Release Notes

Introduction to Halo Guides

HaloPSA - Standard 16-Hour Onboarding SOW

Http to Https redirect in web app

Setting up Two Factor Authentication

IP Addresses for Whitelisting

How are user passwords stored?

CVE-2024-6202 - SAML XML Signature Wrapping (XSW)

CVE-2024-6203 - Password Reset Poisoning

Enable HTTP strict transport security (HSTS)

CVE-2024-6200 - Stored Cross-Site Scripting in Tickets

SQL Injection Vulnerability Patched

Rolling back versions v2.45 and above to versions below v2.45

Enabling Secure Cookies in the Web Application

Read-only connection for reports

Data Storage And Security

CVE-2024-6201 - Emailing Template Injection

Protect token signing keys with a certificate

Enabling Reference Tokens

Blocked HTML Content in Rich Text Editors

Update to SAML Validation

Google reCAPTCHA Integration

X.509 for encryption