PT-2024-24348

CVE-2024-31998

Published

2024-11-04

Updated

2025-03-14

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 3.1.2 Combodo iTop versions prior to 3.2.0

Description A CSRF issue can be performed on CSV import simulation in Combodo iTop, allowing an attacker to forge malicious requests. There are no known workarounds for this issue.

Recommendations For Combodo iTop versions prior to 3.1.2, upgrade to version 3.1.2 or later to resolve the issue. For Combodo iTop versions prior to 3.2.0, upgrade to version 3.2.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Viliald

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)

Related identifiers

CVE-2024-31998