Lucene search
GitHub_MCVELIST:CVE-2023-34446HistoryOct 25, 2023 - 3:35 p.m.
CVE-2023-34446 iTop XSS vulnerability on pages/preferences.php
2023-10-2515:35:21
CWE-79
GitHub_M
www.cve.org
1
itop
web-based
it service management
platform
versions 3.0.4
3.1.0
cross site scripting
fixed
cve-2023-34446
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
20.2%
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying pages/preferences.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
CNA Affected
[
{
"vendor": "Combodo",
"product": "iTop",
"versions": [
{
"version": "< 3.0.4",
"status": "affected"
}
]
}
]Related
cve
cve
CVE-2023-34446
2023-10-25 18:17:28
prion
prion
Cross site scripting
2023-10-25 18:17:00
nvd
nvd
CVE-2023-34446
2023-10-25 18:17:28
vulnrichment
vulnrichment
CVE-2023-34446 iTop XSS vulnerability on pages/preferences.php
2023-10-25 15:35:21
osv
osv
CVE-2023-34446
2023-10-25 18:17:28
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8.3
Confidence
High
EPSS
0.001
Percentile
20.2%
Related for CVELIST:CVE-2023-34446