CVE-2024-54139

Summary

CVE-2024-54139 is a cross-site scripting (XSS) vulnerability impacting versions prior to 2.7.11, 3.1.2, and 3.2.0 of the open-source iTop IT service management platform. This issue can be exploited to perform cross-site request forgery (CSRF) attacks on the `_table_id` parameter. Successful exploitation of this vulnerability could result in unauthorized actions being taken within an affected iTop instance. Users are advised to upgrade to versions 2.7.11, 3.1.2, or 3.2.0, which contain patches to resolve this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.