Vulnerabilities

TI-2021-02802 CVE-2021-3879 · GHSA-9g3v-j3cr-6fc6

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

LOW 26

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00829 Published 2021-10-19 Fixed in 5.3.0 CWE-79

TI-2021-02794 CVE-2021-3863 · GHSA-5rg2-6qr5-2xp8

LOW 29

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0079 Published 2021-10-19 Fixed in 5.3.0 CWE-79

TI-2021-02789 CVE-2021-3858 · GHSA-g92x-8m54-p89v

LOW 39

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00544 Published 2021-10-19 Fixed in 5.3.0 CWE-352