CVE-2021-21407

—

CVSS 3.1

6.5 medium

EPSS

<1%p39

Published

Jul 21, 2021 (Jul 21, 2021)

Modified

Jun 17, 2026

Description

Combodo iTop is an open source, web based IT Service Management tool. Prior to version 2.7.4, the CSRF token validation can be bypassed through iTop portal via a tricky browser procedure. The vulnerability is patched in version 2.7.4 and 3.0.0.

Vendors: combodo
Products: itop
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.