Intelligence View
⚡ tsecurity.de Intelligence
iTop 2.2.1 Cross Site Request Forgery
High-Tech Bridge Security Research Lab discovered a remote code execution vulnerability in iTop that is exploitable via cross site request forgery flaw that is also present in the application. The vulnerability exists due to absence of…
Reagiere als Erste:r — dein Feedback zählt!
High-Tech Bridge Security Research Lab discovered a remote code execution vulnerability in iTop that is exploitable via cross site request forgery flaw that is also present in the application. The vulnerability exists due to absence of validation of HTTP request origin in "/env-production/itop-config/config.php" script, as well as lack of user-input sanitization received via "new_config" HTTP POST parameter.
SOCIAL SHARE CARD GENERATOR