CVE-2023-47489

Summary

CVE-2023-47489 is a local vulnerability in Combodo iTop version 3.1.0-2-11973. An attacker can exploit this CSV injection flaw in the export-as-csv feature to inject malicious scripts into the export-v2.php and ajax.render.php components. Successful exploitation allows the attacker to execute arbitrary code. Users are advised to update their software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.