Lucene search

K
osvGoogleOSV:CVE-2022-1380
HistoryApr 16, 2022 - 12:15 p.m.

CVE-2022-1380

2022-04-1612:15:09
Google
osv.dev
8
cve-2022-1380
cross site scripting
github
snipe-it
user cookie
vulnerability

EPSS

0.001

Percentile

21.4%

Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.

EPSS

0.001

Percentile

21.4%