CVE-2023-47622

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-47622
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47622.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-47622
Aliases
  • GHSA-q9cm-q7fc-frxh
Published
2024-04-15T17:34:01Z
Modified
2026-10-28T02:30:47Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
iTop vulnerable to XSS vulnerability in dashlet refresh
Details

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/47xxx/CVE-2023-47622.json"
}
References

Affected packages

Git / github.com/combodo/itop

Affected ranges

Type
GIT
Repo
https://github.com/combodo/itop
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b8892e965161992618dbfdbe6aa89eda79d6c92d
Introduced
9b409b117f4b5308678d6ab4f3e3ea6dc1fd58cd
Fixed
be699b4358b253d34835f763316877a66e1ba072
Fixed
09be84f69da0fe44221f63b8c2db041bdf7dd7f9
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "3.0.4"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.1.0"
                },
                {
                    "fixed": "3.1.1"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "range": [
                {
                    "fixed": "09be84f69da0fe44221f63b8c2db041bdf7dd7f9"
                }
            ],
            "source": "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

2.*
2.7.0-alpha1
2.7.0-beta
2.7.0-beta2
Other
3
3.*
3.0.0
3.0.0-alpha
3.0.0-beta
3.0.0-beta2
3.0.0-beta3
3.0.0-beta6
3.0.0-beta7
3.0.0-beta8
3.0.0-rc
3.0.1
3.0.1-designer-feature-lot1
3.0.1-designer-feature-lot2
3.0.2-rc1
3.0.3
3.0.3-designer-php8.0-compatibility
3.1.0-alpha1
3.1.0-designer-2
ITSM_Designer_3.*
ITSM_Designer_3.1-compatibility

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-47622.json"