CVE-2023-43790
iTop vulnerable to XSS in friendlyname in object details
Summary
iTop vulnerable to XSS in friendlyname in object details
Original description
The description as published by the source.
iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com