PT-2020-12783 · Comodo+1 · Itop+1

Thenerdone · Published 2020-06-05 · Updated 2024-04-04 · CVE-2020-11696

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions iTop versions prior to 2.6.4 iTop versions prior to 2.7.0

Description The issue concerns a stored XSS payload that can be exploited through a menu shortcut name in iTop.

Recommendations For versions prior to 2.6.4, update to version 2.6.4 or later. For versions prior to 2.7.0, update to version 2.7.0 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-1879

ALT-PU-2024-4537

ALT-PU-2024-4547

ALT-PU-2024-4961

CVE-2020-11696

GHSA-4H6P-JGHJ-8QXM

Affected Products

Alt Linux

Itop

References · 4

• https://osv.dev/vulnerability/CVE-2020-11696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11696 · Security Note
• https://itophub.io/wiki/page?id=2_7_0%3Arelease%3Achange_log · Vendor Advisory
• https://github.com/Combodo/iTop/security/advisories/GHSA-4h6p-jghj-8qxm · Note