medium5.8
CVE-2021-21406
Combodo iTop is an open source, web based IT Service Management tool.
Impact
Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Combodo | Itop | before 2.7.4 Versions 2.7.5, 2.7.5-1 |