CVE-2023-34447: iTop XSS vulnerability on pages/UI.php
Published Oct 25, 2023
·Updated
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on pages/UI.php, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
Affected Software
1 affected component
iTop<3.0.4
Remediation
Event History
Oct 25, 2023
CVE Published
03:35 PM
Data Sourced
03:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-34447?
CVE-2023-34447 is classified as a cross-site scripting vulnerability which can compromise the security of the iTop platform.
2
How do I fix CVE-2023-34447?
To fix CVE-2023-34447, upgrade iTop to versions 3.0.4 or 3.1.0 or later.
3
What versions of iTop are affected by CVE-2023-34447?
CVE-2023-34447 affects iTop versions prior to 3.0.4 and 3.1.0.
4
What impact does CVE-2023-34447 have on users?
CVE-2023-34447 allows attackers to execute malicious scripts in the context of the user's browser, potentially stealing credentials or data.
5
Is CVE-2023-34447 being actively exploited?
There is no public information indicating that CVE-2023-34447 is currently being actively exploited.