CVE-2024-56157
iTop vulnerable to Self XSS in CSV Import
Résumé
iTop vulnerable to Self XSS in CSV Import
Description d'origine
La description telle que publiée par la source (souvent en anglais).
iTop is an web based IT Service Management tool. Prior to versions 3.1.3 and 3.2.1, by filling malicious code in a CSV content, a cross-site scripting attack can be performed when importing this content. The issue is fixed in versions 3.1.3 and 3.2.1. As a workaround, check CSV content before importing it.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov