CVE-2020-15221

Publication date

2021-01-13 17:10:15

Family

GitHub_M

State

PUBLISHED

Description

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, by modifying target browser local storage, an XSS can be generated in the iTop console breadcrumb. This is fixed in versions 2.7.2 and 3.0.0.