VulnerabilityAnalyzed
CVE-2023-47622
When dashlet are refreshed, XSS attacks are possible.
MEDIUM 6.1EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.
- CVSS 3.1
- 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- combodo/itop
- Source
- security-advisories@github.com
References
- https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9Patch
- https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxhVendor Advisory
- https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9Patch
- https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxhVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.