PT-2023-24881 · Itop · Itop

V4Yne1 · Publicado 2023-10-25 · Atualizado 2023-10-31 · CVE-2023-34446

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTop versions prior to 3.0.4 and 3.1.0

Description The issue concerns cross site scripting when displaying the pages/preferences.php page in iTop, an open source, web-based IT service management platform.

Recommendations For versions prior to 3.0.4, update to version 3.0.4 or later. For versions prior to 3.1.0, update to version 3.1.0 or later.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-34446

GHSA-Q4PP-J46R-GM68

Produtos afetados

Itop

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34446.json · Exploit
• https://github.com/Combodo/iTop/security/advisories/GHSA-q4pp-j46r-gm68 · Aviso do Fabricante
• https://github.com/Combodo/iTop/commit/e3ba826e5dfd3b724f1ee97bebfd20ded3c70b10 · Correção
• https://twitter.com/cracbot/status/1717535466256273614 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-34446 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-34446 · Aviso do Fabricante