Lucene search
Veracode Vulnerability DatabaseVERACODE:13558HistoryMar 28, 2019 - 2:13 a.m.
Cross-Site Scripting (XSS)
2019-03-2802:13:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
34.0%
snipe/snipe-it is vulnerable to cross-site scripting (XSS). User input are not escaped before being displayed on a user’s browser, allowing remote attackers to inject arbitrary Javascript into a victim’s browser via log_meta values and user’s last name in the API.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | 4.6.13 |
References
Related
cve
cve
CVE-2019-10118
2019-03-27 04:29:01
cvelist
cvelist
CVE-2019-10118
2019-03-27 03:54:11
osv
osv
Snipe-IT XSS Vulnerability
2022-05-14 01:14:56
CVE-2019-10118
2019-03-27 04:29:01
github
github
Snipe-IT XSS Vulnerability
2022-05-14 01:14:56
nvd
nvd
CVE-2019-10118
2019-03-27 04:29:01
prion
prion
Cross site scripting
2019-03-27 04:29:00