CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

PT-2025-38502

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to a cross-site scripting XSS issue. Recommendations Update Snipe-IT to version 8.1.18 or later...

CVE-2025-59713

Snipe-IT before 8.1.18 allows unsafe deserialization...

CVE-2025-59712

Snipe-IT before 8.1.18 allows XSS...

PT-2025-38503

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.1.18 Description Snipe-IT is susceptible to an unsafe deserialization issue. Recommendations Update to Snipe-IT version 8.1.18 or later...

CVE-2025-59713

CVE-2025-59713 affects Snipe-IT before 8.1.18 and is caused by unsafe deserialization. Public references (Red Hat, OSV, CVE listings) and a PoC/exploit repository indicate potential exploitation paths and cross-reference CVE-2025-59712 as well. The vulnerability impacts confidentiality and integr...

CVE-2024-51094

An issue in Snipe-IT v.7.0.13 build 15514 allows a low-privileged attacker to modify their profile name and inject a malicious payload into the "Name" field. When an administrator later accesses the People Management page, exports the data as a CSV file, and opens it, the injected payload will be...

CVE-2024-51093

Stored Cross-Site Scripting XSS vulnerability in Snipe-IT - v7.0.13 allows an attacker to upload a malicious XML file containing JavaScript code. This can lead to privilege escalation when the payload is executed, granting the attacker super admin permissions within the Snipe-IT system...

CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10...

CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...

CVE-2022-32061

An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-44381

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...

CVE-2022-44380

Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting XSS for View Assigned Assets...

CVE-2022-32060

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-1511

Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4...

CVE-2022-0179

snipe-it is vulnerable to Missing Authorization...

CVE-2021-3938

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3961

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...