CyberRota Analysis
AI-GeneratedCombodo iTop versions prior to 3.2.3 are susceptible to PHP object injection within the user preference feature, allowing attackers to execute arbitrary code remotely. Organizations using affected versions of iTop should prioritize upgrading to version 3.2.3 or later to mitigate this critical vulnerability. This is particularly important for IT service management environments that rely on iTop for operational functionality.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in the user preference functionality, which can lead to remote code execution. This issue has been fixed in version 3.2.3.