Description
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Combodo | iTop | ≤ 2.7.0-beta2 | — |
High · 7.4
CVE-2020-12778
EUVD-2020-5063GHSA-wmp9-25gr-rffr
Combodo iTop - Reflected XSS
Published Aug 10, 2020 · Updated Sep 17, 2024 · Assigned by twcert