CVE-2023-47622CWE-79

iTop vulnerable to XSS vulnerability in dashlet refresh

High · published April 15, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-04-15T17:34Z
EPSS history
Timeline
  • 15 APR 17:34Z
    iTop vulnerable to XSS vulnerability in dashlet refresh
    cvelistv5