CVE-2020-12778
10.08.2020, 03:15
Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack.
| Vendor | Product | Version |
|---|---|---|
| combodo | itop | 𝑥 < 2.7.1 |
| combodo | itop | 3.0.0:alpha |
| combodo | itop | 3.0.0:beta |
| combodo | itop | 3.0.0:beta1 |
| combodo | itop | 3.0.0:beta2 |
| combodo | itop | 3.0.0:beta3 |
| combodo | itop | 3.0.0:beta4 |
| combodo | itop | 3.0.0:beta5 |
| combodo | itop | 3.0.0:beta6 |
| combodo | itop | 3.0.0:beta7 |
| combodo | itop | 3.0.0:beta8 |
| combodo | itop | 3.0.0:rc |
𝑥
= Vulnerable software versions