| Package | Affected versions | Patched versions |
|---|---|---|
| itop | = 2.7.5= 2.7.5-1< 2.7.4 | 2.7.4 |
Combodo iTop is an open source, web based IT Service Management tool. In versions prior to 2.7.4, there is a command injection vulnerability in the Setup Wizard when providing Graphviz executable path. The vulnerability is patched in version 2.7.4 and 3.0.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free