Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-44396

iTop vulnerable to XSS in dashlet modifications ajax endpoints

Description

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Combodo iTop

  • < 2.7.1affected
  • >= 3.0.0, < 3.0.4affected
  • >= 3.1.0, < 3.1.1affected

References