High severity7.8NVD Advisory· Published Nov 9, 2023· Updated Jun 17, 2026

CVE-2023-47489

Description

CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a crafted script to the export-v2.php and ajax.render.php components.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Combodo/Itopcpe-rescue3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)range: v.3.1.0-2-11973
- cpe:2.3:a:combodo:itop:3.1.0-2-11973:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

bugplorer.github.io/cve-csv-itop/nvdBroken Link
nitipoom-jar.github.io/CVE-2023-47489/nvd
nitipoom-jaroonchaipipat.github.io/security-research-portal/2023-47489nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000