Snipe-IT 授权问题漏洞

Snipe-IT is an open source IT asset/license management system. An authorization issue vulnerability exists in Snipe-IT versions prior to 6.0.10 that stems from incorrect authentication...

Cross-Site Scripting (XSS)

snipe/snipe-it is vulnerable to cross-site scripting. The vulnerability exists in views/dashboard.blade.php and login.blade.php because the user inputs are not properly escaped which allows a remote attacker to inject and execute malicious code into the system...

GHSA-RFF2-VQM3-JPV5 snipe-it vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

snipe-it vulnerable to cross-site scripting (XSS)

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

The vulnerability of the IT asset management system snipe-it arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out XSS attacks.

The vulnerability of the IT asset management system snipe-it exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2022-3035

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

CVE-2022-3035

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

CVE-2022-3035 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

CVE-2022-3035

CVE-2022-3035 is a Stored XSS vulnerability affecting Snipe-IT prior to version 6.0.11. Multiple sources (NVD/NVD-listed entry, OSV, Veracode, CVE list) consistently describe Cross-site Scripting in the web app, originating from insufficient escaping/input handling in the UI when processing user ...

CVE-2022-3035 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.0.11...

PT-2022-4504 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it versions prior to 6.0.11 Description: The issue is related to a Cross-site Scripting XSS - Stored vulnerability. It exists due to inadequate protection of the web page structure, allowing a remote attacker to conduct an inter-site...

Snipe-IT 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system. A cross-site scripting vulnerability exists in Snipe-IT versions prior to v6.0.11, which originates from a user with Super Administrator privileges being able to implement cross-site scripting via a Markdown Input field...

Session Fixation

snipe/snipe-it is vulnerable to session fixation. The vulnerability exists in passwordsave function in ProfileController.php due to not logging the user out of other devices when changing the password which allows the attacker to submit an old password session link to access the system...

Insufficient Session Expiration in snipe/snipe-it

Session Fixation in GitHub repository snipe/snipe-it prior to version 6.0.10. The session is not invalidated after a password change...

CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

Session fixation

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-2997 Session Fixation in snipe/snipe-it

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-2997 Session Fixation in snipe/snipe-it

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-2997

CVE-2022-2997 affects the Snipe-IT project (snipe/snipe-it) prior to 6.0.10. Root cause: a session-fixation issue where the session is not invalidated after a password change. Impact: could enable unauthorized access to user accounts if exploited. Remediation: upgrade to version 6.0.10 or later; ...