Lucene search
Veracode Vulnerability DatabaseVERACODE:35238HistoryApr 25, 2022 - 10:49 a.m.
Cross-Site Scripting (XSS)
2022-04-2510:49:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
21.6%
snipe/snipe-it is vulnerable to cross-site scripting. The vulnerability exists in transformAssets function in DepreciationReportTransformer because the checked_out_to parameter is not properly escaped which allows an attacker to send and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | v5.4.3 | |
| snipe/snipe-it | le | v5.4.3 |
Related
cvelist
cvelist
cve
cve
CVE-2022-1445
2022-04-24 15:15:07
github
github
Stored cross-site scripting in Snipe-IT
2022-04-25 00:00:49
prion
prion
Cross site scripting
2022-04-24 15:15:00
osv
osv
CVE-2022-1445
2022-04-24 15:15:07
Stored cross-site scripting in Snipe-IT
2022-04-25 00:00:49
nvd
nvd
CVE-2022-1445
2022-04-24 15:15:07
huntr
huntr
Stored Cross Site Scripting vulnerability in the checked_out_to parameter
2022-04-23 08:34:27