CVE-2025-24785
iTop dashboard vulnerable to denial of service
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
iTop dashboard vulnerable to denial of service
iTop is an web based IT Service Management tool. In version 3.2.0, an attacker may send a URL to the server to trigger a PHP error. The next user trying to load this dashboard would encounter a crashed start page. Version 3.2.1 fixes the issue by checking the provided layout_class before saving the dashboard.
Reserved 2025-01-23 | Published 2025-05-14 | Updated 2025-05-14 | Assigner GitHub_MCWE-20: Improper Input Validation
github.com/...o/iTop/security/advisories/GHSA-49rq-cgv9-7hv4
Support options
