Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3931 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3931

CVE-2021-3931 is a CSRF vulnerability reported for Snipe-IT (open source IT asset/license management software). The connected records consistently describe CSRF in Snipe-IT due to a lack of CSRF checks/token for POST requests, notably in the view.blade.php file, enabling cross-site request forger...

CVE-2021-3938

CVE-2021-3938 affects the open-source asset management web app Snipe-IT with a Cross-site Scripting (XSS) vulnerability. The issue stems from lack of proper filtering/escaping of user-submitted data in the AssetsController, enabling injection in web page generation. Public details cover the affec...

CVE-2021-3938 Cross-site Scripting (XSS) - Generic in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

snipe-it 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system. Snipe-IT has a cross-site scripting vulnerability that stems from the lack of filtering and escaping of user-submitted data in AssetsController, for which no detailed vulnerability details are currently available...

CVE-2021-3931: Cross-Site Request Forgery (CSRF)

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Snipe-IT 跨站请求伪造漏洞

Snipe-IT is an open source IT asset/license management system. Snipe-IT is vulnerable to cross-site request forgery, which stems from a lack of csrf checksum for POST requests in the software's view.blade.php file, and can be exploited by attackers to launch cross-site request forgery attacks...

CVE-2021-3938: Improper Neutralization of Input During Web Page Generation

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Description Multiple Stored XSS at 'snipeitram3' and 'snipeitcpu4' in the multipart message of POST request when creating a new Asset or editing an existed Asset. Proof of Concept POST /hardware HTTP/1.1 Host: develop.snipeitapp.com Connection: close Content-Length: 2560 Cache-Control: max-age=0...

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Description XSS in bulk audit function via the asset tag parameter Proof of Concept 1: Go to http:///hardware/bulkaudit feature 2: Use alertdocument.domain as "Asset Tag" parameter 3: Click "Audit", the XSS should be triggered via the message Asset Tag ASSETTAG not found. Impact This vulnerabilit...

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Description CSRF in custom field settings Proof of Concept /fields/1/fieldset/1/disassociate" /fields/required/3/3" /fields/optional/3/3" Impact This vulnerability is capable of trick admin user to modify custom forms...

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19844)

Snipe-IT is an open source IT asset/license management system. Snipe-IT suffers from a cross-site scripting vulnerability that stems from the fact that the program is vulnerable to incorrect input during web page generation, which could be exploited by an attacker to execute arbitrary JavaScript...

Snipe-IT Cross-site Request Forgery Vulnerability (CNVD-2022-19843)

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, which could be exploited by attackers to obtain sensitive information...

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19845)

Snipe-IT is an open source IT asset/license management system. snipe-IT has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

GHSA-5RG2-6QR5-2XP8 Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

GHSA-G92X-8M54-P89V Cross-Site Request Forgery in snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Cross-Site Request Forgery in snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...