CVE-2025-24785

CVE-2025-24785 concerns the iTop web-based IT Service Management tool. Affected version: 3.2.0, where an attacker could trigger a PHP error by sending a crafted URL, causing the next user’s dashboard start page to crash. The issue is addressed in version 3.2.1, which fixes the vulnerability by va...

CVE-2025-24785 iTop dashboard vulnerable to denial of service

iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layoutclass before saving th...