Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2022/04/05 3:5 p.m.25 views

CVE-2021-41245 Possible Cross-Site Request Forgery in Combodo iTop

Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, CSRF tokens generated by privUITransactionFile aren't properly checked. Versions 2.7.6 and 3.0.0 contain a patch for this issue. As a workaround, use the session implementation by adding in the iTop conf...

6.5CVSS8.2AI score0.00694EPSS
SaveExploits1References3
Rows per page
Query Builder