CVE-2023-43790

Name of the Vulnerable Software and Affected Versions iTop versions prior to 3.1.1 iTop versions prior to 3.2.0

Description iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value.

Recommendations For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to HTTP queries that can manipulate the object friendlyname value until a patch is available.