CVE-2023-44396

CVSS V2 None CVSS V3 None

Description

iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.10, 3.0.4, and 3.1.1.

Overview

CVE ID
CVE-2023-44396

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-04-15T17:13:45.144Z

Last Modified Date
2024-04-15T17:13:45.144Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html
CWE-80	http://cwe.mitre.org/data/definitions/80.html

References

Reference URL	Reference Tags
https://github.com/Combodo/iTop/security/advisories/GHSA-gqqj-jgh6-3x35	x_refsource_CONFIRM
https://github.com/Combodo/iTop/commit/9df92665e08c4bf5d4d8a5a9fe21fd3fb26fb273	x_refsource_MISC
https://github.com/Combodo/iTop/commit/c72cb7e70ebf469ce0ec01f5f9b524e39afe6c7f	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-44396
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44396

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 12:35:44				Added to TrackCVE