Lucene search
Veracode Vulnerability DatabaseVERACODE:35160HistoryApr 19, 2022 - 8:55 a.m.
Cross-site Scripting (XSS)
2022-04-1908:55:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
cross-site scripting
snipe-it
user requestable results
malicious script
cookie theft
EPSS
0.001
Percentile
21.4%
snipe/snipe-it is vulnerable to cross-site scripting. Lack of sanitization of the user requestable results enable an attacker to inject malicious script to steal user cookie.
Related
cve
cve
CVE-2022-1380
2022-04-16 12:15:09
nvd
nvd
CVE-2022-1380
2022-04-16 12:15:09
cnvd
cnvd
snipe-it cross-site scripting vulnerability (CNVD-2022-36053)
2022-04-19 00:00:00
huntr
huntr
Stored Cross Site Scripting vulnerability in Item name parameter
2022-04-11 15:24:04
osv
osv
Cross-site Scripting in snipe-it
2022-04-17 00:00:32
CVE-2022-1380
2022-04-16 12:15:09
redhatcve
redhatcve
CVE-2022-1380
2022-05-20 22:33:46
prion
prion
Cross site scripting
2022-04-16 12:15:00
cvelist
cvelist
github
github
Cross-site Scripting in snipe-it
2022-04-17 00:00:32