{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T18:04:04.041","vulnerabilities":[{"cve":{"id":"CVE-2025-24969","sourceIdentifier":"security-advisories@github.com","published":"2025-05-14T16:15:27.300","lastModified":"2026-06-17T08:59:54.123","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"iTop is an web based IT Service Management tool. Prior to version 3.2.1, a portal user can see any other contacts picture by changing the picture ID in the URL. Version 3.2.1 contains a patch for the issue."},{"lang":"es","value":"iTop es una herramienta web de gestión de servicios de TI. Antes de la versión 3.2.1, un usuario del portal podía ver la foto de cualquier otro contacto modificando el ID de la foto en la URL. La versión 3.2.1 incluye una corrección para este problema."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"Combodo","product":"iTop","versions":[{"version":"< 3.2.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.1,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-14T15:45:46.450095Z","id":"CVE-2025-24969","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-639"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.1","matchCriteriaId":"BF8B6F29-FD69-4F2C-8A50-7A32FC0FDCE0"}]}]}],"references":[{"url":"https://github.com/Combodo/iTop/security/advisories/GHSA-52p7-7f8f-j7pc","source":"security-advisories@github.com","tags":["Vendor Advisory"]}]}}]}