CyberRota Analysis
AI-GeneratedA reflected cross-site scripting (XSS) vulnerability exists in the foreign key search criteria API of Combodo iTop versions prior to 3.2.3, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to unauthorized actions or data theft, posing a significant risk to users interacting with the affected web application. Organizations utilizing Combodo iTop should prioritize upgrading to version 3.2.3 or later to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting (XSS) vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3.