← Database

CVE-2025-24969

MEDIUM CVSS: 5.0 Published: 2025-05-14 Modified: 2026-06-17

Description

iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue.

Affected Platforms

Combodo Itop

Weakness Type

CWE-639

References