CVE-2020-12781: Combodo iTop - CSRF
Published Aug 10, 2020
·Updated
Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.
Affected Software
12 affected components
iTop<2.7.1
iTop=3.0.0-alpha
iTop=3.0.0-beta
iTop=3.0.0-beta1
iTop=3.0.0-beta2
iTop=3.0.0-beta3
iTop=3.0.0-beta4
iTop=3.0.0-beta5
iTop=3.0.0-beta6
iTop=3.0.0-beta7
iTop=3.0.0-beta8
iTop=3.0.0-rc
Remediation
Information
Update to version 2.7.1
Event History
Aug 10, 2020
CVE Published
via MITRE·02:45 AM
Data Sourced
via MITRE·02:45 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-12781?
CVE-2020-12781 is a cross-site request forgery (CSRF) vulnerability in Combodo iTop.
2
How does CVE-2020-12781 affect Combodo iTop?
CVE-2020-12781 allows attackers to execute specific commands via malicious site request forgery in Combodo iTop.
3
What is the severity of CVE-2020-12781?
CVE-2020-12781 has a severity rating of 8.8 (high).
4
Which versions of Combodo iTop are affected by CVE-2020-12781?
Combodo iTop versions up to 2.7.1, 3.0.0-alpha, 3.0.0-beta, 3.0.0-beta1, 3.0.0-beta2, 3.0.0-beta3, 3.0.0-beta4, 3.0.0-beta5, 3.0.0-beta6, 3.0.0-beta7, 3.0.0-beta8, and 3.0.0-rc are affected by CVE-2020-12781.
5
How can I fix CVE-2020-12781 in Combodo iTop?
To fix CVE-2020-12781 in Combodo iTop, apply the latest security patch provided by Combodo.