CVE-2021-32663: SSRF

First published: Tue Oct 19 2021(Updated: )

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later

Credit: security-advisories@github.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/weakness
• agent/references
• agent/author
• agent/severity
• agent/description
• agent/tags
• agent/type
• agent/event
• agent/first-publish-date
• agent/softwarecombine
• agent/remedy
• agent/last-modified-date
• vendor/combodo
• canonical/combodo itop
• version/combodo itop/2.7.0