Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-52002

Опубликовано: 08 нояб. 2024
Источник: nvd
CVSS3: 7.6
CVSS3: 8.8
EPSS Низкий

Описание

Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
Версия до 3.2.0 (исключая)

EPSS

Процентиль: 90%
0.05478
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-352

EPSS

Процентиль: 90%
0.05478
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-352