CVE-2023-5511

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

CVE-2023-5511 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

CVE-2023-5511

CVE-2023-5511 : Cross-Site Request Forgery in the GitHub repository snipe/snipe-it prior to v6.2.3. The weakness is triggered by CSRF in the snipe-it web app, with analysis across sources indicating the issue derives from request handling for the resend remainder acceptance option (defaulting to ...

CVE-2023-5511 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

CVE-2023-5511 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...

PT-2023-32143 · Unknown · Snipe/Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.2.3 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository snipe/snipe-it. CSRF is a type of attack where an attacker tricks a user into performing unintended actions o...

Moderate: Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Setup Bundle Release Update

An update is now available for Red Hat Ansible Automation Platform 2.4 Setup Bundle Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

A previously undocumented threat actor of unknown provenance has been linked to a number of attacks targeting organizations in the manufacturing, IT, and biomedical sectors in Taiwan. The Symantec Threat Hunter Team, part of Broadcom, attributed the attacks to an advanced persistent threat APT it...

Cross Site Scripting (XSS)

snipe/snipe-it is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping asset history values while displaying the values on the browser on the view asset page. An attacker can inject malicious JavaScript while editing assets in the location field leading t...

Snipe-IT Cross-Site Request Forgery Vulnerability

Snipe-IT is an open source IT asset/license management system. A cross-site request forgery vulnerability exists in Snipe-IT versions prior to v.6.2.3, which stems from vulnerability to cross-site request forgery CSRF attacks...

Cross-site Scripting in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

CVE-2023-5452

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

CVE-2023-5452

Snipe-IT is affected by a stored cross-site scripting (XSS) vulnerability in versions prior to 6.2.2. Public records describe the issue as affecting the location endpoint (and possibly assets) with stored payloads that can execute script when viewed by another user. A PoC exists in 6.2.1 (and rel...

CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...

PT-2023-32112 · Unknown · Snipe/Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.2.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository snipe/snipe-it. Recommendations: For versions prior to 6.2.2, update to version 6.2.2 or later ...

Snipe-IT Cross-Site Scripting Vulnerability

Snipe-IT is an open source IT asset/license management system. A cross-site scripting vulnerability exists in Snipe-IT versions prior to v6.2.2 that stems from the presence of a stored cross-site scripting XSS vulnerability...

it-setup.ro Cross Site Scripting vulnerability OBB-3722371

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...