CVE-2023-44396
iTop vulnerable to XSS in dashlet modifications ajax endpoints
Résumé
iTop vulnerable to XSS in dashlet modifications ajax endpoints
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com