CVE-2023-34447
published 2023-10-25CVE-2023-34447: iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, cross site scripting is possible. This…
PriorityP426medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.68%
47.6th percentile
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| combodo | itop | < 3.0.4 | 3.0.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Combodo/iTop/commit/519751faa10b2fc5b75ea4516a1b8ef13ca35b33https://github.com/Combodo/iTop/commit/b8f61362f570e1ef8127175331012b7fc8aba802https://github.com/Combodo/iTop/security/advisories/GHSA-6rfm-2rwg-mj7phttps://github.com/Combodo/iTop/commit/519751faa10b2fc5b75ea4516a1b8ef13ca35b33https://github.com/Combodo/iTop/commit/b8f61362f570e1ef8127175331012b7fc8aba802https://github.com/Combodo/iTop/security/advisories/GHSA-6rfm-2rwg-mj7p
2023-10-25
Published