writeups.xyz / iTop – Template Injection inside customer Portal

Submitter : c2a

Date: 21 March 2022

Bounty : undisclosed

Vulnerabilities :

• SSTI
• RCE

Programs :

• Combodo (ITop)

Authors :

• Markus Krell (@MarkusKrell)

Link :
https://markus-krell.de/itop-template-injection-inside-customer-portal/