Medium · 6.8 CVE-2023-44396 EUVD-2023-48741

iTop vulnerable to XSS in dashlet modifications ajax endpoints

Published Apr 15, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.

Vendor	Product	Affected	Fixed
Combodo	iTop	< 2.7.1, >= 3.0.0, < 3.0.4, >= 3.1.0, < 3.1.1	—