CVE-2021-32663

2021-10-1918:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later

CPENameOperatorVersion
itopeq2.6.0
itopeq2.7.3
itopeqN2011
itopeqN941-2
itopeq2.7.3-1
itopeq2.7.0-1
itopeq2.6.3
itopeq2.7.2-1
itopeq2.7.0-2
itopeq2.7.3-2