Description (CNA)
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layout_class before saving the dashboard.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Combodo / iTop | affected = 3.2.0 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.