1531 matches found
CVE-2023-5511
Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...
PT-2023-32143 · Unknown · Snipe/Snipe-It
Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.2.3 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository snipe/snipe-it. CSRF is a type of attack where an attacker tricks a user into performing unintended actions o...
CVE-2023-5511: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository snipe/snipe-it prior to v.6.2.3...
Cross Site Scripting (XSS)
snipe/snipe-it is vulnerable to Cross Site Scripting XSS. The vulnerability is caused by not sanitizing/escaping asset history values while displaying the values on the browser on the view asset page. An attacker can inject malicious JavaScript while editing assets in the location field leading t...
Snipe-IT Cross-Site Request Forgery Vulnerability
Snipe-IT is an open source IT asset/license management system. A cross-site request forgery vulnerability exists in Snipe-IT versions prior to v.6.2.3, which stems from vulnerability to cross-site request forgery CSRF attacks...
Cross-site Scripting in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
CVE-2023-5452
Snipe-IT is affected by a stored cross-site scripting (XSS) vulnerability in versions prior to 6.2.2. Public records describe the issue as affecting the location endpoint (and possibly assets) with stored payloads that can execute script when viewed by another user. A PoC exists in 6.2.1 (and rel...
PT-2023-32112 · Unknown · Snipe/Snipe-It
Name of the Vulnerable Software and Affected Versions: snipe/snipe-it versions prior to 6.2.2 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository snipe/snipe-it. Recommendations: For versions prior to 6.2.2, update to version 6.2.2 or later ...
CVE-2023-5452: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository snipe/snipe-it prior to v6.2.2...
Snipe-IT Cross-Site Scripting Vulnerability
Snipe-IT is an open source IT asset/license management system. A cross-site scripting vulnerability exists in Snipe-IT versions prior to v6.2.2 that stems from the presence of a stored cross-site scripting XSS vulnerability...
Vulnerabilities fixed in Snipe-IT
Several vulnerabilities have been fixed in Snipe-IT. The vulnerabilities allow a remote malicious person to launch an XSS attack and to retrieve usernames. To exploit the XSS vulnerability, the malicious party must be authenticated and have rights to Accessory and Consumables to modify. The...
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting XSS for View Assigned Assets...
Snipe-IT allows attackers to check whether a user account exists
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...
GHSA-QQV9-GQH5-7H99 Snipe-IT allows attackers to check whether a user account exists
Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request...