PT-2024-24348
CVE-2024-31998
·
تاريخ النشر
2024-11-04
·
تاريخ التحديث
2025-03-14
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Combodo iTop versions prior to 3.1.2
Combodo iTop versions prior to 3.2.0
Description
A CSRF issue can be performed on CSV import simulation in Combodo iTop, allowing an attacker to forge malicious requests. There are no known workarounds for this issue.
Recommendations
For Combodo iTop versions prior to 3.1.2, upgrade to version 3.1.2 or later to resolve the issue.
For Combodo iTop versions prior to 3.2.0, upgrade to version 3.2.0 or later to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾