731 matches found
CVE-2021-4130
CVE-2021-4130 describes a Cross-Site Request Forgery (CSRF) vulnerability in the open-source asset management app snipe-it . The connected records confirm the issue across multiple sources but do not provide concrete details on affected versions or affected components beyond the CSRF label. CVSS ...
CVE-2021-4130 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
Snipe-IT 跨站请求伪造漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, no details of the vulnerability are provided...
GHSA-9VWF-54M9-GC4F snipe-it is vulnerable to Improper Access Control
snipe-it prior to version 5.3.4 is vulnerable to Improper Access Control. Regular users with DENY set to all models permissions can still view model information via the /models/id/clone endpoint due to no authorize'view' permission being set...
GHSA-RXCH-GP62-574W snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Description CSRF to disrupt request tracking Proof of Concept Open the HTML file as a logged-in user Impact Unauthenticated attackers situated outside of the organization can disrupt request tracking by sending the malicious HTML to a user which will cause them to request an asset...
snipe-it cross-site scripting vulnerability (CNVD-2022-08729)
Snipe-IT is an open source IT asset/license management system. snipe-it suffers from a cross-site scripting vulnerability, which stems from vulnerability to incorrect input during web page generation. No detailed vulnerability details are currently available...
CVE-2021-4108
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4108
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4108 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-4108
CVE-2021-4108 affects the open-source asset management platform snipe-it . The vulnerability is a Cross-site Scripting (XSS) caused by Improper Neutralization of Input During Web Page Generation in the web interface. This is described across connected sources as a stored XSS issue in snipe-it, wi...
snipe-it 跨站脚本漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it suffers from a cross-site scripting vulnerability, which stems from vulnerability to incorrect input during web page generation. No detailed vulnerability details are currently available...
Snipe-IT Access Control Error Vulnerability
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, and no details of the vulnerability are currently available...
Insecure Access Control
snipe/snipe-it is vulnerable to improper access control. The vulnerability exists because it does not perform sufficient user permissions, allowing users to view model information via clone endpoint...
Cross-site Scripting (XSS) - Stored in snipe/snipe-it
Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web application to send malicious code, generally in the form of a browser side script, to a differen...
GHSA-553Q-HPVP-Q8PC Server-Side Request Forgery in snipe/snipe-it
Admin users on the external network can perform blind POST-based SSRF issue requests on behalf of the server into the internal network via the Slack Integration. This vulnerability is capable of port-scanning of the internal network, issue POST requests to web servers on the internal network whic...
Server-Side Request Forgery in snipe/snipe-it
Admin users on the external network can perform blind POST-based SSRF issue requests on behalf of the server into the internal network via the Slack Integration. This vulnerability is capable of port-scanning of the internal network, issue POST requests to web servers on the internal network whic...