Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-38511 EUVD-2023-42311

iTop Dashboard editor vulnerable dashboard config file parameter

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1.

Affected products

VendorProductAffectedFixed
Combodo iTop >= 3.0.0, < 3.0.4, >= 3.1.0, < 3.1.1 —

References