Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19845
HistoryOct 22, 2021 - 12:00 a.m.

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19845)

2021-10-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
snipe-it
open source
xss
vulnerability
management system
validation
client-side code
web application
attackers

EPSS

0.001

Percentile

21.4%

Snipe-IT is an open source IT asset/license management system. snipe-IT has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code.

EPSS

0.001

Percentile

21.4%

Related for CNVD-2022-19845