CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

Server side request forgery (ssrf)

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-4075

CVE-2021-4075 (snipe/snipe-it) is corroborated across multiple sources as a Server-Side Request Forgery (SSRF) issue. The connected advisories identify the vulnerability as exploitable via the Slack integration, enabling blind POST-based SSRF where an attacker with admin access could issue reques...

CVE-2021-4075 Server-Side Request Forgery (SSRF) in snipe/snipe-it

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

PT-2021-22953

Name of the Vulnerable Software and Affected Versions snipe-it affected versions not specified Description The issue allows admin users on the external network to perform blind POST-based Server-Side Request Forgery SSRF via the Slack Integration. This enables them to issue requests on behalf of...

Snipe-IT 代码问题漏洞

Snipe-IT is an open source IT asset/license management system. snipe-IT is vulnerable to a code issue that could be exploited by attackers to conduct server-side request forgery SSRF attacks...

CVE-2021-4075: Server-Side Request Forgery (SSRF)

snipe-it is vulnerable to Server-Side Request Forgery SSRF...

snipe-it is vulnerable to Cross-site Scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross-site Scripting (XSS)

snipe/snipe-it is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the transformCheckedoutAccessory function in AccessoriesTransformer.php as it does not properly escape the user inputs checkout notes...

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4018

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-4018

CVE-2021-4018 is a stored Cross-site Scripting (XSS) vulnerability affecting snipe-it. Public sources describe an XSS flaw in the web page generation path, with the vulnerability located in checkout/notes handling (notably via AccessoriesTransformer.php/transformCheckedoutAccessory) that allows i...

CVE-2021-4018 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

PT-2021-22837

Name of the Vulnerable Software and Affected Versions snipe-it affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software fails to properly neutralize user input,...

Snipe-IT 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system . Snipe-IT has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks...