Cross-Site Request Forgery (CSRF)

snipe/snipe-it is vulnerable to cross-site request forgery. The vulnerability exists in the getRequestAsset in the ViewAssetsController.php, allowing an attacker to disrupt request tracking by sending the malicious HTML...