CVE-2023-47622

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is fixed in 3.0.4 and 3.1.1.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
CombodoiTop< 3.0.4; >= 3.1.0, < 3.1.1

References

Timeline

Published
Apr 15, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-476236.1Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability eCVE-2023-476246.5Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their permissions) may beCVE-2023-476254.3PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_CVE-2023-476266.1iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible. This vulnerabilityCVE-2023-476277.5aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with headerCVE-2023-476284.8DataHub is an open-source metadata platform. DataHub Frontend's sessions are configured using Play Framework's default settings for statelesCVE-2023-476298.0DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signiCVE-2023-47638.8Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a cCVE-2023-476307.1Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images uCVE-2023-476318.8vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). CVE-2023-476337.5Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backendCVE-2023-476343.1Decidim is a participatory democracy framework. Starting in version 0.10.0 and prior to versions 0.26.9, 0.27.5, and 0.28.0, a race conditio
CVE-2023-47622: Medium severity, CVSS 6.1 | Vulnix