CVE-2021-32776
21.07.2021, 21:15
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, CSRF tokens can be reused by a malicious user, as on Windows servers no cleanup is done on CSRF tokens. This issue is fixed in versions 2.7.4 and 3.0.0.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| combodo | itop | 𝑥 < 2.7.4 |
| combodo | itop | 3.0.0:alpha |
| combodo | itop | 3.0.0:beta |
| combodo | itop | 3.0.0:beta2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration