high7.4
CVE-2020-12778
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
Impact
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Combodo | Itop | before 2.7.1 Version 3.0.0 |