Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Description CSRF in custom field settings Proof of Concept /fields/1/fieldset/1/disassociate" /fields/required/3/3" /fields/optional/3/3" Impact This vulnerability is capable of trick admin user to modify custom forms...

Snipe-IT Cross-site Request Forgery Vulnerability (CNVD-2022-19843)

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, which could be exploited by attackers to obtain sensitive information...

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19844)

Snipe-IT is an open source IT asset/license management system. Snipe-IT suffers from a cross-site scripting vulnerability that stems from the fact that the program is vulnerable to incorrect input during web page generation, which could be exploited by an attacker to execute arbitrary JavaScript...

Snipe-IT Cross-Site Scripting Vulnerability (CNVD-2022-19845)

Snipe-IT is an open source IT asset/license management system. snipe-IT has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers to execute client-side code...

GHSA-5RG2-6QR5-2XP8 Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

GHSA-G92X-8M54-P89V Cross-Site Request Forgery in snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Cross-Site Request Forgery in snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-9G3V-J3CR-6FC6 Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting in snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...