CVE-2023-47488: Combodo Itop

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive information via a crafted script to the attrib_manager_id parameter in the General Information page and the id parameter in the contact page.

Affected products

• Combodo Itop: version 3.1.0-2-11973 only

Published 2023-11-09. Last modified 2026-06-17.