CVE-2024-56157

iTop is an web based IT Service Management tool. Prior to versions 3.1.3 and 3.2.1, by filling malicious code in a CSV content, a cross-site scripting attack can be performed when importing this content. The issue is fixed in versions 3.1.3 and 3.2.1. As a workaround, check CSV content before importing it.

• CWE-79

• https://github.com/Combodo/iTop/security/advisories/GHSA-6p48-74j9-977jVendor Advisory

Published

May 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-56142pghoard is a PostgreSQL backup daemon and restore tooling th…6.5
• CVE-2024-56143Strapi is an open-source headless content management system.…8.2
• CVE-2024-56144librenms is a community-based GPL-licensed network monitorin…5.4
• CVE-2024-56145Craft is a flexible, user-friendly CMS for creating custom d…9.8
• CVE-2024-5615The Open Graph plugin for WordPress is vulnerable to Sensiti…5.3
• CVE-2024-56156Halo is an open source website building tool. Prior to versi…9
• CVE-2024-56158XWiki is a generic wiki platform. It's possible to execute a…9.8
• CVE-2024-56159Astro is a web framework for content-driven websites. A bug …5.3
• CVE-2024-5616A Cross-Site Request Forgery (CSRF) vulnerability exists in …4.3
• CVE-2024-56161Improper signature verification in AMD CPU ROM microcode pat…7.2
• CVE-2024-56169A validation integrity issue was discovered in Fort through …5.3
• CVE-2024-56170A validation integrity issue was discovered in Fort through …5.3