Combodo iTop - Reflected XSS
CVE-2020-12778

7.4HIGH

Key Information:

Vendor: Combodo
Status: Itop
Vendor: CVE Published:; 10 August 2020

🔔 Create Combodo Vulnerability Alert

What is CVE-2020-12778?

Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.

Affected Version(s)

iTop 0 <= 2.7.0-beta2

References

https://www.twcert.org.tw/tw/cp-132-3834-591e2-1.html

x_refsource_MISC

https://github.com/Combodo/iTop/security/advisories/GHSA-...

x_refsource_MISC

CVSS V3.1

Score:

7.4

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 10, 2020
Vulnerability Reserved
May 11, 2020

.