Description

iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, server code execution is possible through the frontend of iTop's portal. This is fixed in versions 2.7.12, 3.1.3 and 3.2.1.

INFO

Published Date :

2025-05-14T14:57:37.960Z

Last Modified :

2026-01-20T15:37:55.868Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-24022 vulnerability.

Vendors Products
Combodo
  • Itop
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-24022.

URL Resource
https://github.com/Combodo/iTop/commit/082d865efaf8a349b60fe3875e9c726c24f8a8bd cve-icon cve-icon
https://github.com/Combodo/iTop/commit/37fc1a572380f2faa67fddea5b1a3a4ba72ed54e cve-icon cve-icon
https://github.com/Combodo/iTop/commit/5780f26817c2303c5bdd0ad16e21d4d959780b0b cve-icon cve-icon
https://github.com/Combodo/iTop/security/advisories/GHSA-rhv2-wfrr-4j2j cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact