CVE-2021-21407 — Portal : the CSRF token isn't validated
Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser …
Published: 2021-07-21 · CVSS: 8.0 · CVSS 3.1
Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser procedure. The vulnerability is patched in version 2.7.4 and 3.0.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7