by Kastro
Paper/Archive/CVE-2023-48710

CVE-2023-48710

Combodo iTop — iTop limit pages/exec.php script to PHP files

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.9.539 × 2010.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they should have restricted access. Hopefully, there is no sensitive files stored in that folder natively, but there could be from a third-party module. The `pages/exec.php` script as been fixed to limit execution of PHP files only. Other file types won't be retrieved and exposed. The vulnerability is fixed in 2.7.10, 3.0.4, 3.1.1, and 3.2.0.

Affected

ProductAffectedFixed inSource
iTop< 2.7.10–CNA
iTop>= 3.0.0, < 3.0.4–CNA
iTop>= 3.1.0, < 3.1.1–CNA
itop< 2.7.102.7.10CISA-ADP
itop3.0.0 – < 3.0.43.0.4CISA-ADP
itop3.1.0 – < 3.1.13.1.1CISA-ADP

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfcrefgithub.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26