Is there a chance of XML Injection vulnerability in ITOP?

An easy, extensible web based IT service management platform

Brought to you by: abdelh, accognet, axbost, azana38, and 18 others

Is there a chance of XML Injection vulnerability in ITOP?

Forum: Extending and integrating iTop

Creator: Naveenkumar R

Created: 2024-05-17

Updated: 2024-05-27

Naveenkumar R - 2024-05-17

Greetings @cisou @glajarige

how to ensure proper input sanitization to mitigate the risks associated with untrusted user input. Operating the database with the least privileges to minimize potential security vulnerabilities?

Could an attacker achieve XXE injection in ITop?

xml injection.png

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Naveenkumar R - 2024-05-27

Hi @cisou @glajarige @dcoille ,
Could you please confirm if there are any XML injection vulnerabilities present in ITop?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Log in to post a comment.