Unrated severityNVD Advisory· Published Jul 21, 2021· Updated Aug 3, 2024
No CSRF form token cleanup on Windows servers
CVE-2021-32776
Description
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, CSRF tokens can be reused by a malicious user, as on Windows servers no cleanup is done on CSRF tokens. This issue is fixed in versions 2.7.4 and 3.0.0.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/Combodo/iTop/security/advisories/GHSA-cxw7-2x7h-f7prmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.