CyberRota Analysis
AI-GeneratedA reflected Cross-Site Scripting (XSS) vulnerability exists in the universal search feature of Combodo iTop prior to version 3.2.3, allowing attackers to inject malicious scripts that could compromise user sessions or manipulate web content. Organizations using affected versions of this IT service management tool should prioritize upgrading to version 3.2.3 or later to mitigate potential exploitation risks. This vulnerability poses a significant threat to any entity relying on iTop for IT service management, particularly those handling sensitive data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting (XSS) vulnerability in the universal search. This issue has been fixed in version 3.2.3.