CVE-2024-51740

Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manager has been fixed to only instantiate classes derived from it. This issue has been addressed in...

CVE-2024-51740

creationtimestamp| type| source ---|---|--- 2024-11-05 18:41:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113431810262179634 2024-11-05 21:25:34+00:00| seen| https://t.me/cvedetector/9934...

CVE-2024-51740 SSRF through arbitrary PHP class instantiation in the user portal in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manager has been fixed to only instantiate classes derived from it. This issue has been addressed in...