CVE-2023-43790

CVSS 3.1 Score 5.7 of 10 (medium)

Details

Published Apr 15, 2024
CWE ID 79
CWE ID 80

Summary

CVE-2023-43790 is a vulnerability affecting the iTop IT service management platform. An attacker can exploit this issue by manipulating HTTP queries and inject malicious content into the friendlyname fields. This could potentially lead to unintended actions or data corruption. Users are advised to upgrade to iTop versions 3.1.1 or 3.2.0 to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share