CVE-2023-47489

CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and…

published November 9, 2023

CVSS
—
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00448 · 37.9th percentile
Published
2023-11-09T00:00Z
EPSS history
Timeline
  • 09 NOV 00:00Z
    CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and…
    cvelistv5