CVE-2024-31448

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Nov 5, 2024

Updated: Nov 6, 2024

CWE ID 79

Summary

CVE-2024-31448 is a recently disclosed Cross-site Scripting (XSS) vulnerability affecting the open-source IT Service Management tool, iTop, developed by Combodo. Malicious code injected into a CSV file can be executed when importing the content, leading to potential security risks. iTop users are recommended to upgrade to versions 3.1.2 or 3.2.0 to mitigate this issue. For those unable to upgrade, it's crucial to validate CSV content prior to importing it to prevent potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Combodo iTop

Affected Vendors

Combodo

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/0NYvPl
https://www.cve.org/CVERecord?id=CVE-2024-31448
https://nvd.nist.gov/vuln/detail/CVE-2024-31448

Back to Vulnerability Database