Lucene search

K
githubGitHub Advisory DatabaseGHSA-33VJ-R6P6-X4P8
HistoryOct 11, 2023 - 3:30 a.m.

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

2023-10-1103:30:32
CWE-352
GitHub Advisory Database
github.com
9
cross-site request forgery
github
snipe-it
software

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.9%

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

Affected configurations

Vulners
Node
snipesnipe-itRange6.2.2
VendorProductVersionCPE
snipesnipe-it*cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.9%