CVE-2021-32664

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-32664

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32664.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2021-32664

Related

GHSA-j758-ggwg-9mpj

Published

2021-10-19T18:15:07.853Z

Modified

2026-03-19T04:27:42.448327Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on "run query" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5.

References

Affected packages

Git / github.com/combodo/itop

Affected ranges

Type

GIT

Repo

https://github.com/combodo/itop

Events

Introduced

46151c87c09ed4f85cd22e1c522d036e4f99ce96

Fixed

d90b1a3d821f094466994cf02d7e3395779e783e

Fixed

4f5c987d8b1bd12814dc606ea69b6cfb88490704

Fixed

84741c19f0af6fa8e7082a8807eb089182e7b88a

Fixed

86f649affc12b5078efc86d9439d67d98f4cb2f6

Database specific

{
    "versions": [
        {
            "introduced": "2.7.0"
        },
        {
            "fixed": "2.7.5"
        }
    ]
}

Affected versions

1.*

1.0.8

2.*

2.6.4

2.7.0

2.7.0-1

2.7.0-2

2.7.0-rc2

2.7.1

2.7.2

2.7.2-1

2.7.3

2.7.3-1

2.7.3-2

2.7.4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-32664.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.6.5"
            }
        ]
    }
]