Vulnerabilities (CVE)

Filtered by vendor Snipeitapp Subscribe
Total 43 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3863 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3858 1 Snipeitapp 1 Snipe-it 2024-11-21 6.8 MEDIUM 8.8 HIGH
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2019-10118 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.