CVE-2021-41161

2022-04-2117:15:07

Google

osv.dev

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don’t properly escape the user supplied parameters, allowing for javascript injection into rendered csv files. Users are advised to upgrade. There are no known workarounds for this issue.

CPENameOperatorVersion
itopeq2.6.0
itopeq2.7.3
itopeqN2011
itopeq2.7.0-beta2
itopeqN941-2
itopeq3
itopeq2.7.3-1
itopeqitop-carbon
itopeq2.7.0-1
itopeq2.6.3