CVE-2021-32663

iTop is an open source web based IT Service Management tool. In affected versions an attacker can call the system setup without authentication. Given specific parameters this can lead to SSRF. This issue has been resolved in versions 2.6.5 and 2.7.5 and later
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:combodo:itop:*:*:*:*:-:*:*:*
cpe:2.3:a:combodo:itop:*:*:*:*:-:*:*:*

Information

Published : 2021-10-19 11:15

Updated : 2021-10-22 13:49


NVD link : CVE-2021-32663

Mitre link : CVE-2021-32663


JSON object : View

CWE
CWE-918

Server-Side Request Forgery (SSRF)

Advertisement

dedicated server usa

Products Affected

combodo

  • itop