1083 matches found
Unspecified vulnerability in snipe-it (CNVD-2022-10714)
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...
Improper Access Control in snipe/snipe-it
Description A user with no rights for API tokens can view the page where API tokens can be generated and can generate API tokens. Proof of Concept - Create a user with no permission for anything i.e. everything on deny. - Log in with this user to the web application. - Visit...
Improper Access Control in snipe/snipe-it
Description All bulk actions bulk-edit / bulk-delete / form info in asset models do not have access control checks Proof of concept 1: Grant view to Asset Models 2: UI for bulk-edit and bulk-delete is still enabled, proceed. 3: You may bulk-delete / edit any asset model Impact This vulnerability ...
GHSA-4W23-C97G-FQ5V snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it cross-site request forgery vulnerability (CNVD-2022-08728)
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, no details of the vulnerability are provided...
Cross-Site Request Forgery (CSRF)
snipe/snipe-it is vulnerable to cross-site request forgery. The vulnerability exists in the getRequestAsset in the ViewAssetsController.php, allowing an attacker to disrupt request tracking by sending the malicious HTML...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
CVE-2021-4130 describes a Cross-Site Request Forgery (CSRF) vulnerability in the open-source asset management app snipe-it . The connected records confirm the issue across multiple sources but do not provide concrete details on affected versions or affected components beyond the CSRF label. CVSS ...
Snipe-IT 跨站请求伪造漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, no details of the vulnerability are provided...
GHSA-9VWF-54M9-GC4F snipe-it is vulnerable to Improper Access Control
snipe-it prior to version 5.3.4 is vulnerable to Improper Access Control. Regular users with DENY set to all models permissions can still view model information via the /models/id/clone endpoint due to no authorize'view' permission being set...
snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-RXCH-GP62-574W snipe-it is vulnerable to Cross-site Scripting
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Description CSRF to disrupt request tracking Proof of Concept Open the HTML file as a logged-in user Impact Unauthenticated attackers situated outside of the organization can disrupt request tracking by sending the malicious HTML to a user which will cause them to request an asset...
snipe-it cross-site scripting vulnerability (CNVD-2022-08729)
Snipe-IT is an open source IT asset/license management system. snipe-it suffers from a cross-site scripting vulnerability, which stems from vulnerability to incorrect input during web page generation. No detailed vulnerability details are currently available...