CVE-2023-43790
iTop vulnerable to XSS in friendlyname in object details
Résumé
iTop vulnerable to XSS in friendlyname in object details
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com