Lucene search
PRIOn knowledge basePRION:CVE-2021-41161HistoryApr 21, 2022 - 5:15 p.m.
Code injection
2022-04-2117:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
26.4%
Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don’t properly escape the user supplied parameters, allowing for javascript injection into rendered csv files. Users are advised to upgrade. There are no known workarounds for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| itop | eq | 3.0.0 beta | |
| itop | eq | 3.0.0 beta2 | |
| itop | eq | 3.0.0 beta3 | |
| itop | eq | 3.0.0 beta4 | |
| itop | eq | 3.0.0 beta5 | |
| itop | lt | 3.0.0 |
Related
cvelist
cvelist
CVE-2021-41161 XSS in csvimport in 3.0.0-beta versions
2022-04-21 16:35:10
osv
osv
CVE-2021-41161
2022-04-21 17:15:07
cve
cve
CVE-2021-41161
2022-04-21 17:15:07
nvd
nvd
CVE-2021-41161
2022-04-21 17:15:07