VYPR
← All advisories
High severity7.9NVD Advisory· Published Dec 13, 2024· Updated Jun 17, 2026

CVE-2024-54139

CVE-2024-54139

Description

Combodo iTop is an open source and web-based IT service management platform. Prior to versions 2.7.11, 3.1.2, and 3.2.0., iTop has a cross-site scripting vulnerability that can lead to cross-site request forgery on the _table_id parameter. Versions 2.7.11, 3.1.2, and 3.2.0 contain a patch for the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Combodo/Itopllm-fuzzy8 versions
    <2.7.11, <3.1.2, <3.2.0+ 7 more
    • (no CPE)range: <2.7.11, <3.1.2, <3.2.0
    • (no CPE)range: < 2.7.11
    • cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*range: <2.7.11
    • cpe:2.3:a:combodo:itop:3.2.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:combodo:itop:3.2.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:combodo:itop:3.2.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:combodo:itop:3.2.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:combodo:itop:3.2.0:rc3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.