Description

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.

INFO

Published Date :

2024-04-15T17:13:45.144Z

Last Modified :

2024-08-02T20:07:33.423Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2023-44396 vulnerability.

Vendors Products
Combodo
  • Itop
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-44396.

URL Resource
https://github.com/Combodo/iTop/commit/9df92665e08c4bf5d4d8a5a9fe21fd3fb26fb273 cve-icon cve-icon cve-icon
https://github.com/Combodo/iTop/commit/c72cb7e70ebf469ce0ec01f5f9b524e39afe6c7f cve-icon cve-icon cve-icon
https://github.com/Combodo/iTop/security/advisories/GHSA-gqqj-jgh6-3x35 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact