CVE-2023-38511

Summary

CVE-2023-38511 is a vulnerability affecting the iTop IT service management platform. In the dashboard editor, users can load multiple files and URLs, unintentionally exposing the full path of the dashboard configuration file. This issue poses a potential security risk, as an attacker could gain unauthorized access to sensitive data. The vulnerability has been resolved in versions 3.0.4 and 3.1.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.