Lucene search
K

5 matches found

NVD
NVD
added 2024/11/08 11:15 p.m.11 views

CVE-2024-52001

Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability...

4.3CVSS0.00494EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/08 10:18 p.m.10 views

CVE-2024-52001 Portal user is able to access forbidden services information in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access forbidden services information. This issue has been addressed in version 3.2.0. All users are advised to upgrade. There are no known workarounds for this vulnerability...

4.3CVSS6.8AI score0.00494EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/05/19 2:56 p.m.3 views

squid: improper input validation may allow a trusted client to perform HTTP request smuggling

A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...

8.6CVSS5.7AI score0.00583EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/05/18 7:4 p.m.3 views

squid: improper input validation may allow a trusted client to perform HTTP request smuggling

A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...

8.6CVSS5.7AI score0.00583EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/04/08 1:40 p.m.2 views

squid: improper input validation may allow a trusted client to perform HTTP request smuggling

A flaw was found in squid. Due to improper validation while parsing the request URI, squid is vulnerable to HTTP request smuggling. This issue could allow a trusted client to perform an HTTP request smuggling attack and access services otherwise forbidden by squid. The highest threat from this...

8.6CVSS5.7AI score0.00583EPSS
Exploits0References5
Rows per page
Query Builder