CVE-2020-12781

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-12781
Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery.

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://www.twcert.org.tw/tw/cp-132-3837-050db-1.html Third Party Advisory
https://github.com/Combodo/iTop/security/advisories/GHSA-34rq-vfmf-gg5v
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*
cpe:2.3:a:combodo:itop:2.7.0:beta:*:*:*:*:*:*
Information

Published : 2020-08-10 03:15

Updated : 2020-09-25 17:15

NVD link : CVE-2020-12781

Mitre link : CVE-2020-12781

JSON object : View

Products Affected

combodo

  • itop
CWE
CWE-352

Cross-Site Request Forgery (CSRF)