NetSight
high7.4

CVE-2020-12778

Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.

Impact

Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.

Affected products

VendorProductAffected versions
CombodoItop
before 2.7.1
Version 3.0.0

Weakness classification

References