Skip to content
OpenAdvisories
High · 8.8 CVE-2023-34447 EUVD-2023-38522

iTop XSS vulnerability on pages/UI.php

Published Oct 25, 2023 · Updated Sep 11, 2024 · Assigned by GitHub_M

Description

iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.

Affected products

VendorProductAffectedFixed
Combodo iTop < 3.0.4 —

References