CVE-2023-43790 — iTop vulnerable to XSS in friendlyname in object details
iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerab…
Published: 2024-04-15 · CVSS: 5.7 · CVSS 3.1
iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7