Lucene search
@huntrdevCVELIST:CVE-2021-4075HistoryDec 06, 2021 - 8:20 p.m.
CVE-2021-4075 Server-Side Request Forgery (SSRF) in snipe/snipe-it
2021-12-0620:20:10
CWE-918
@huntrdev
www.cve.org
3
snipe-it
ssrf
vulnerability
cve-2021-4075
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
41.1%
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
CNA Affected
[
{
"product": "snipe/snipe-it",
"vendor": "snipe",
"versions": [
{
"lessThan": "none",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
CVE-2021-4075
2021-12-06 21:15:07
Server-Side Request Forgery in snipe/snipe-it
2021-12-10 20:22:15
nvd
nvd
CVE-2021-4075
2021-12-06 21:15:07
cnvd
cnvd
Snipe-IT code issue vulnerability
2021-12-08 00:00:00
huntr
huntr
Server-Side Request Forgery (SSRF) in snipe/snipe-it
2021-12-05 18:00:16
github
github
Server-Side Request Forgery in snipe/snipe-it
2021-12-10 20:22:15
cve
cve
CVE-2021-4075
2021-12-06 21:15:07
prion
prion
Server side request forgery (ssrf)
2021-12-06 21:15:00
veracode
veracode
Server-Side Request Forgery (SSRF)
2021-12-07 04:01:23
CVSS3
2.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
41.1%
Related for CVELIST:CVE-2021-4075