CVE-2024-56157

Name of the Vulnerable Software and Affected Versions: iTop versions prior to 3.1.3 and 3.2.1

Description: The issue allows a cross-site scripting attack to be performed when importing malicious CSV content. This can be done by filling malicious code in a CSV content. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations: For versions prior to 3.1.3, update to version 3.1.3 or later. For versions prior to 3.2.1, update to version 3.2.1 or later. As a temporary workaround, check CSV content before importing it to minimize the risk of exploitation.