CVE-2023-38511
published 2024-04-15CVE-2023-38511: iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This…
PriorityP420medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.68%
47.9th percentile
iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure on dashboard config file. This vulnerability is fixed in 3.0.4 and 3.1.1.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| combodo | itop | — | — |
| combodo | itop | — | — |
| combodo | itop | >= 3.0.0 < 3.0.4 | 3.0.4 |
| combodo | itop | >= 3.1.0 < 3.1.1 | 3.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Combodo/iTop/commit/343e87a8d4fc8253fd81aeaf0dcc424b9dc4eda7https://github.com/Combodo/iTop/commit/89145593ef2e077529a6f7ee7cde712db637e1abhttps://github.com/Combodo/iTop/security/advisories/GHSA-323r-chx5-m9gmhttps://www.synacktiv.com/advisories/file-read-in-itophttps://github.com/Combodo/iTop/commit/343e87a8d4fc8253fd81aeaf0dcc424b9dc4eda7https://github.com/Combodo/iTop/commit/89145593ef2e077529a6f7ee7cde712db637e1abhttps://github.com/Combodo/iTop/security/advisories/GHSA-323r-chx5-m9gmhttps://www.synacktiv.com/advisories/file-read-in-itop
2024-04-15
Published