CVE-2024-52002

Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-352

• https://github.com/Combodo/iTop/security/advisories/GHSA-xr4x-xq7v-7gqmVendor Advisory

Published

Nov 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-51997Trustee is a set of tools and components for attesting confi…8.1
• CVE-2024-51998changedetection.io is a free open source web page change det…8.6
• CVE-2024-51999Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-5200The Postie WordPress plugin before 1.9.71 does not sanitise …4.8
• CVE-2024-52000Combodo iTop is a simple, web based IT Service Management to…6.1
• CVE-2024-52001Combodo iTop is a simple, web based IT Service Management to…4.3
• CVE-2024-52003Traefik (pronounced traffic) is an HTTP reverse proxy and lo…6.1
• CVE-2024-52004MediaCMS is an open source video and media CMS, written in P…8.7
• CVE-2024-52005Git is a source code management tool. When cloning from a se…8.8
• CVE-2024-52006Git is a fast, scalable, distributed revision control system…7.5
• CVE-2024-52007HAPI FHIR is a complete implementation of the HL7 FHIR stand…8.6
• CVE-2024-52008Fides is an open-source privacy engineering platform. The us…8.8