CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site request forgery (csrf)

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

Cross site scripting

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3879

CVE-2021-3879 affects snipe-it and is caused by improper neutralization of input during web page generation, leading to Cross-site Scripting (XSS). Multiple connected records corroborate a client-side data validation weakness in the web app, with impact described as disclosure/intrusion via injec...

CVE-2021-3879

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3879 Cross-site Scripting (XSS) - Stored in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863 Cross-site Scripting (XSS) - Generic in snipe/snipe-it

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3863

CVE-2021-3863 affects the open-source asset management app Snipe-IT . The connected documents consistently describe it as a vulnerability of Improper Neutralization of Input During Web Page Generation (XSS) , caused by insecure handling of input that leads to arbitrary JavaScript execution via we...

CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3858 Cross-Site Request Forgery (CSRF) in snipe/snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3858

CVE-2021-3858 affects the snipe-it project (an open-source IT asset/license management system) and is a Cross-Site Request Forgery (CSRF) vulnerability. Public scoring in CVSSv3.1 is 8.8 (HIGH) with AV:N, AC:L, PR:N, UI:R, C:H, I:H, A:H; CVSSv2 is 6.8 (MEDIUM). The connected documents consistentl...

PT-2021-22290

Name of the Vulnerable Software and Affected Versions snipe-it affected versions not specified Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This means that the software does not properly handle user input,...

Snipe-IT 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system. Snipe-IT suffers from a cross-site scripting vulnerability that stems from the fact that the program is vulnerable to incorrect input during web page generation, which could be exploited by an attacker to execute arbitrary JavaScript...

PT-2021-22224

Name of the Vulnerable Software and Affected Versions snipe-it affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided abou...