CVE-2024-51740
Combodo iTop is a simple, web based IT Service Management tool. This vulnerability can be used to create HTTP requests on behalf of the server, from a low privileged user. The user portal form manager has been fixed to only instantiate classes derived from it. This issue has been addressed in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
- Combodo Itop
- < 2.7.11, 3.0.5, 3.1.2
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 0.5% (42th percentile)
- Weakness
- CWE-918
- NVD status
- Analyzed
- Published
- 2024-11-05
CVE-2024-51740 at NVD
No indexed exploits for CVE-2024-51740 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-51740 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.