Combodo iTop Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Combodo iTop, a web-based IT service management tool. This issue affects versions prior to 2.7.13 and 3.2.2. The vulnerability arises when a field containing an error is populated with malicious content, allowing for the injection of harmful scripts. In contrast, versions 2.7.13 and 3.2.2 have implemented measures to protect rendered HTML content from such attacks.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can upgrade to iTop versions 2.7.13 or 3.2.2 to address this vulnerability.