medium6.3
CVE-2024-56157
iTop is an web based IT Service Management tool.
Impact
iTop is an web based IT Service Management tool. Prior to versions 3.1.3 and 3.2.1, by filling malicious code in a CSV content, a cross-site scripting attack can be performed when importing this content. The issue is fixed in versions 3.1.3 and 3.2.1. As a workaround, check CSV content before importing it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Combodo | Itop | before 3.1.3 from 3.2.0 before 3.2.1 |