Vulnerability · Published Apr 15, 2024 · Assigned by GitHub_M

CVE-2023-48710iTop limit pages/exec.php script to PHP files

Critical 9.8

In plain English

A critical-severity security flaw in iTop from Combodo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.7%top 45.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0.

Affected products (as reported)

Vendor	Product	Versions
Combodo	iTop	< 2.7.10>= 3.0.0, < 3.0.4>= 3.1.0, < 3.1.1

Weakness: CWE-552 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc x_refsource_CONFIRM
https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26 x_refsource_MISC