CVE-2024-31998CWE-352

CSRF security issue on CSV import in Combodo iTop

High · published November 4, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

Combodo iTop is a simple, web based IT Service Management tool. A CSRF can be performed on CSV import simulation. This issue has been fixed in versions 3.1.2 and 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-11-04T23:35Z
EPSS history
Timeline
  • 04 NOV 23:35Z
    CSRF security issue on CSV import in Combodo iTop
    cvelistv5