CVE-2025-24022 — 神龙十问 AI 深度分析摘要

**🚨 iTop OS Command Injection** - Allows attackers to execute arbitrary OS commands via portal frontend. - Can lead to full server compromise 🖥️💥 - High impact on confidentiality, integrity, availability 📉

**🔍 Root Cause: CWE-78 - Improper Neutralization of Special Elements** - Unsanitized user input in portal frontend triggers server code execution. - Flaw in how commands are built from user data 🧩

**⚠️ Affected Versions** - iTop **< 2.7.12** - iTop **< 3.1.3** - iTop **< 3.2.1** - All versions using vulnerable portal frontend 🌐

**🎯 Hacker Capabilities** - Execute any OS command 🧨 - Read/write files 📁 - Steal sensitive data 🔐 - Escalate to full system control 👑

**🔐 Exploitation Threshold: Medium-High** - **Low Privilege Required** (PR:L) 📌 - **No Authentication Needed** (UI:N) 🚫🔑 - **High Complexity** (AC:H) 🧠

**🔍 Public Exploit? ❌** - **No PoCs listed** in references 📄 - **No wild exploitation reported** 🌍 - Patched via GitHub commits 🔒

**🔎 Self-Check Steps** - Check iTop version 📦 - Verify if portal frontend is enabled 🌐 - Look for unusual command logs 📜 - Use web scanner for command injection patterns 🔍

**✅ Official Fix? YES** - Patched in versions **2.7.12, 3.1.3, 3.2.1** 🛠️ - Fixes in GitHub commits: [37fc1a5](https://github.com/Combodo/iTop/commit/37fc1a572380f2faa67fddea5b1a3a4ba72ed54e), [5780f26](https://github.co…

**🛠️ Workarounds (if no patch)** - Disable portal frontend 🚫🌐 - Restrict access via firewall 🛡️ - Monitor logs for suspicious commands 📊 - Apply input sanitization manually 🧼

**🚨 URGENT: High Priority** - CVSS 9.8/10 (C:H/I:H/A:H) 📊 - Remote, unauthenticated RCE 🌍🔓 - Patch immediately if affected ⚡ - **Critical for all iTop users** ⚠️