CVE-2026-27463

Published: Aug 21, 2026Modified: Sep 9, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: security-advisories@github.com (Secondary)

Description

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, the HTML title attribute of the logo in the login page contains the complete iTop version. This issue has been fixed in version 3.2.3.

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/Combodo/iTop/commit/d124f8ee58fa243193184ac2c55a561acdded356

Source: security-advisories@github.com

https://github.com/Combodo/iTop/security/advisories/GHSA-hm9q-8jx3-f3v5

Source: security-advisories@github.com

Timeline

No history available yet.