CVE-2024-54139
Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter
Résumé
Combodo iTop vulnerable to XSS leading to CSRF breach on _table_id parameter
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Combodo iTop is an open source and web-based IT service management platform. Prior to versions 2.7.11, 3.1.2, and 3.2.0., iTop has a cross-site scripting vulnerability that can lead to cross-site request forgery on the _table_id parameter. Versions 2.7.11, 3.1.2, and 3.2.0 contain a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov