CVE-2023-44396
iTop vulnerable to XSS in dashlet modifications ajax endpoints
概要
iTop vulnerable to XSS in dashlet modifications ajax endpoints
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com