high8.8
CVE-2023-47622
iTop is an IT service management platform.
Impact
iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Combodo | Itop | before 3.0.4 from 3.1.0 before 3.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9
- https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxh
- https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9
- https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxh