{"id":"CVE-2021-32664","details":"Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on \"run query\" page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5.","aliases":["GHSA-j758-ggwg-9mpj"],"modified":"2026-07-08T06:00:13.066793705Z","published":"2021-10-19T18:15:07.853Z","database_specific":{"unresolved_ranges":[{"vendor_product":"combodo:itop","cpes":["cpe:2.3:a:combodo:itop:*:*:*:*:-:*:*:*"],"extracted_events":[{"fixed":"2.6.5"}],"source":"CPE_RANGE"}]},"references":[{"type":"ADVISORY","url":"https://github.com/Combodo/iTop/security/advisories/GHSA-j758-ggwg-9mpj"},{"type":"FIX","url":"https://github.com/Combodo/iTop/commit/4f5c987d8b1bd12814dc606ea69b6cfb88490704"},{"type":"FIX","url":"https://github.com/Combodo/iTop/commit/84741c19f0af6fa8e7082a8807eb089182e7b88a"},{"type":"FIX","url":"https://github.com/Combodo/iTop/commit/86f649affc12b5078efc86d9439d67d98f4cb2f6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/combodo/itop","events":[{"introduced":"46151c87c09ed4f85cd22e1c522d036e4f99ce96"},{"fixed":"d90b1a3d821f094466994cf02d7e3395779e783e"},{"fixed":"4f5c987d8b1bd12814dc606ea69b6cfb88490704"},{"fixed":"84741c19f0af6fa8e7082a8807eb089182e7b88a"},{"fixed":"86f649affc12b5078efc86d9439d67d98f4cb2f6"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:combodo:itop:*:*:*:*:-:*:*:*","extracted_events":[{"introduced":"2.7.0"},{"fixed":"2.7.5"}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32664.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"}]}