Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2025-24969

iTop portal user can see any other contact's picture

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Combodo iTop

  • < 3.2.1affected

References