CVE-2023-48710: Files or Directories Accessible to External Parties

iTop is an IT service management platform. Files from the env-production folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The pages/exec.php script as been...

CVE-2019-13967: Undefined Security Weakness

iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service application outage via many requests to launch a compile operation. The requests use the pages/exec.php?execenv=production&execmodule=itop-hub-connector&execpage=ajax.php&operation=compile URI. This only affects the...