Volerion logoVolerion
Volerion logoVolerion

Combodo iTop Database Drop Vulnerability via Webhooks

Vulnerability

A vulnerability exists in Combodo iTop versions prior to 2.7.13 and 3.2.2, allowing users with the rights to create webhooks, primarily administrators, to drop the iTop database. This issue has been addressed in iTop 2.7.13 and 3.2.2 by implementing a verification of the callback signature.

Impact

Exploitation of this vulnerability allows for unauthorized database deletion.

Added: Nov 10, 2025, 10:33 PM
Updated: Nov 10, 2025, 10:33 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
1.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.