Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19844
HistoryOct 22, 2021 - 12:00 a.m.

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19844)

2021-10-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

31.1%

Snipe-IT is an open source IT asset/license management system. Snipe-IT suffers from a cross-site scripting vulnerability that stems from the fact that the program is vulnerable to incorrect input during web page generation, which could be exploited by an attacker to execute arbitrary JavaScript.

0.001 Low

EPSS

Percentile

31.1%

Related for CNVD-2022-19844