Lucene search
HistoryNov 09, 2023 - 6:15 a.m.
CVE-2023-47488
combodo itop
cross site scripting
sensitive information
general information page
contact page
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
15.9%
Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page.
Affected configurations
Node
combodoitopMatch3.1.0-2-11973
Related
prion
prion
Cross site scripting
2023-11-09 06:15:00
cvelist
cvelist
CVE-2023-47488
2023-11-09 00:00:00
cve
cve
CVE-2023-47488
2023-11-09 06:15:24
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
15.9%
Related for NVD:CVE-2023-47488