CVE-2023-44396
iTop vulnerable to XSS in dashlet modifications ajax endpoints
Summary
iTop vulnerable to XSS in dashlet modifications ajax endpoints
Original description
The description as published by the source.
iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com