36 matches found
CVE-2026-86741
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML img tags pointing to local files or remote URLs, which the mail auto-embed librar...
CVE-2026-86741
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML tags pointing to local files or remote URLs, which the mail auto-embed library r...
CVE-2026-86741 Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML img tags pointing to local files or remote URLs, which the mail auto-embed librar...
EUVD-2026-74918
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML img tags pointing to local files or remote URLs, which the mail auto-embed librar...
CVE-2026-86741 Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML img tags pointing to local files or remote URLs, which the mail auto-embed librar...
PT-2026-89010
Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout confirmation emails. Attackers with low-privilege permissions can inject markdown image syntax or raw HTML img tags pointing to local files or remote URLs, which the mail auto-embed librar...
Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...
GHSA-3HGV-JR5J-CG9X Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application. Steps to Reproduce: 1. Log in as a restricted user. 2. Send a GET request to /api/v1/users/targetid/eula...
CVE-2026-55694
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...
CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...
CVE-2026-55694
Snipe-IT (IT asset/license management system) prior to 8.6.3 is vulnerable to a chained information disclosure and IDOR that allows a restricted user to download another user's signed EULA file. The attack works in two steps: first, a request to /api/v1/users/{target_id}/eulas leaks the randomize...
EUVD-2026-62631
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...
CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...
CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
Snipe-IT is an IT asset/license management system. Prior to 8.6.3, a restricted user can request /api/v1/users/targetid/eulas to obtain another user's randomized EULA filename and then download the signed file through /account/stored-eula-file/filename. The primary /stored-eula-file/filename rout...
Malicious code in epic-eula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955a3f497d3fbf00bbe90e04372506178c1536e9de4bfc78041ed23b63d1dec9 The package epic-eula was found to contain malicious code...
Malicious code in epic-eula-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61ae3154f45ef3009726f77c558f647f5b608c9111d6e3341b8af6479b6d6d8 The package epic-eula-service was found to contain malicious code...
MAL-2025-49142 Malicious code in epic-eula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 955a3f497d3fbf00bbe90e04372506178c1536e9de4bfc78041ed23b63d1dec9 The package epic-eula was found to contain malicious code...
EUVD-2025-37150
Malicious code in epic-eula-service npm...
MAL-2025-49143 Malicious code in epic-eula-service (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61ae3154f45ef3009726f77c558f647f5b608c9111d6e3341b8af6479b6d6d8 The package epic-eula-service was found to contain malicious code...