CVE-2023-47622: iTop vulnerable to XSS vulnerability in dashlet refresh
Published Apr 15, 2024
·Updated
iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.
Affected Software
3 affected components
iTop>=0.0.0<3.0.4, >=3.0.4<3.1.1
iTop<3.0.4
iTop>=3.1.0<3.1.1
Remediation
Event History
Apr 15, 2024
CVE Published
via MITRE·05:34 PM
Data Sourced
via MITRE·05:34 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47622?
CVE-2023-47622 is considered a high severity vulnerability due to its potential for XSS attacks.
2
How do I fix CVE-2023-47622?
To resolve CVE-2023-47622, upgrade iTop to version 3.0.4 or 3.1.1 or later.
3
What software versions are affected by CVE-2023-47622?
CVE-2023-47622 affects all versions of iTop prior to 3.0.4 and between 3.0.4 and 3.1.1.
4
What type of attacks does CVE-2023-47622 allow?
CVE-2023-47622 allows for cross-site scripting (XSS) attacks through improperly refreshed dashlets.
5
Who is the vendor for CVE-2023-47622?
The vendor for CVE-2023-47622 is Combodo, the creator of the iTop IT service management platform.