CVE-2025-24785 — iTop dashboard vulnerable to denial of service
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard w…
Published: 2025-05-14 · CVSS: 4.3 · CVSS 3.1
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layout_class before saving the dashboard.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7