CVE-2025-47286

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.13 Combodo iTop versions prior to 3.2.2

Description Combodo iTop is a web-based IT service management tool. An administrator can execute code on the server by editing the configuration of the iTop instance in affected versions. Versions 2.7.13 and 3.2.2 include measures to escape and check the configuration parameter before executing a command based on it.

Recommendations Update to version 2.7.13 or later. Update to version 3.2.2 or later.