Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
iTop vulnerable to XSS vulnerability in n:n relations "tagset" widget
Vulnerability Description
iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be performed when this object will displayed as an n:n relation item in another object. This vulnerability is fixed in 3.1.1 and 3.2.0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
iTop 安全漏洞
Vulnerability Description
iTop是一个提供优化 iTop 所需的所有资源的平台。 iTop 3.1.1 和 3.2.0 版本存在安全漏洞，该漏洞源于通过在对象友好名称/补充名称中填充恶意代码，当该对象在另一个对象中显示为 n:n 关系项时，可以执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A