CVE-2023-47123
iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget
Résumé
iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be performed when this object will displayed as an n:n relation item in another object. This vulnerability is fixed in 3.1.1 and 3.2.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com