CVE-2024-52002CWE-352

Cross-Site Request Forgery (CSRF) in several iTop pages

High · published November 8, 2024

CVSS v3.0
7.6
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.0
7.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00717 · 53.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-11-08T22:16Z
EPSS history
Timeline
  • 08 NOV 22:16Z
    Cross-Site Request Forgery (CSRF) in several iTop pages
    cvelistv5