CVE-2020-15218

6.8 mediumEPSS 0.8%

Medium (6.8) in combodo itop. EPSS 0.8% chance of exploitation in the next 30 days.

Combodo iTop is a web based IT Service Management tool. In iTop before versions 2.7.2 and 3.0.0, admin pages are cached, so that their content is visible after deconnection by using the browser back button. This is fixed in versions 2.7.2 and 3.0.0.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2021-01-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

combodo:itop

References

https://github.com/Combodo/iTop/security/advisories/GHSA-3m3g-86hp-5p2j
https://github.com/Combodo/iTop/security/advisories/GHSA-3m3g-86hp-5p2j

Check your stack JSON