<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 28 Oct 2026 08:34:25 +0000</lastBuildDate>
    <item>
      <title>CVE-2025-24021 — iTop doesn't have mass assignment of fields in the portal form</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2025-24021</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Combodo iTop&lt;/p&gt;
&lt;p&gt;iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can set value to object fields when they&amp;#39;re not supposed to. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Combodo iTop&lt;/p&gt;
&lt;p&gt;iTop is an web based IT Service Management tool. Prior to versions 2.7.12, 3.1.3, and 3.2.1, anyone with an account having portal access can set value to object fields when they&amp;#39;re not supposed to. Versions 2.7.12, 3.1.3, and 3.2.1 contain a fix for the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2025-24021</guid>
    </item>
  </channel>
</rss>
