PT-2024-36067 · Comodo+1 · Itop+1
CVSS v3.1
9.6
Critical
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Combodo iTop versions prior to 2.7.11
Combodo iTop versions prior to 3.1.2
Combodo iTop versions prior to 3.2.0
Description:
Combodo iTop is an open source and web-based IT service management platform. The platform has a cross-site scripting issue that can lead to cross-site request forgery on the
table id parameter.Recommendations:
For versions prior to 2.7.11, upgrade to version 2.7.11 to protect your environment.
For versions prior to 3.1.2, upgrade to version 3.1.2 to protect your environment.
For versions prior to 3.2.0, upgrade to version 3.2.0 to protect your environment.
Exploit
Fix
CSRF
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Itop