PatchFirst · Latest vulnerabilities

snipe/snipe-it vulnerabilities · Page 4

Vulnerabilities published for snipe/snipe-it in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 81

CVE-2022-1445
Critical · CVSS 9EPSS 0.78%Fix available
Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it
Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.
snipe/snipe-it PHP
- Update to 5.4.3
Published April 24, 2022Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-1380
Critical · CVSS 9.1EPSS 0.85%Fix available
Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.
snipe/snipe-it PHP
- Update to 5.4.3
Published April 16, 2022Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-1155
High · CVSS 7.4EPSS 0.99%Fix available
Old sessions are not blocked by the login enable function. in snipe/snipe-it
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
snipe/snipe-it snipe/snipe-it PHP
- Update to 5.4.2
- Update to 6.0.0-RC-6
Published March 30, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0622
Medium · CVSS 5.3EPSS 0.99%Fix available
Generation of Error Message Containing Sensitive Information in snipe/snipe-it
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
snipe/snipe-it PHP
- Update to 5.3.11
Published February 17, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0611
Medium · CVSS 6.3EPSS 1.2%Fix available
Missing Authorization in snipe/snipe-it
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
snipe/snipe-it PHP
- Update to 5.3.11
Published February 15, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0579
Medium · CVSS 6.5EPSS 1.05%Fix available
Missing Authorization in snipe/snipe-it
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
snipe/snipe-it PHP
- Update to 5.3.9
Published February 14, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0569
Medium · CVSS 5.3EPSS 1.04%Fix available
Observable Discrepancy in snipe/snipe-it
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
snipe/snipe-it PHP
- Update to 5.3.10
Published February 12, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0178
Medium · CVSS 6.3EPSS 0.59%Fix available
Missing Authorization in snipe/snipe-it
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.
snipe/snipe-it PHP
- Update to 5.3.8
Published January 13, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2022-0179
Medium · CVSS 6.3EPSS 0.64%Fix available
Missing Authorization in snipe/snipe-it
snipe-it is vulnerable to Missing Authorization
snipe/snipe-it PHP
- Update to 5.3.7
Published January 12, 2022Updated August 2, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4130
Medium · CVSS 4.3EPSS 0.48%Fix available
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe/snipe-it PHP
- Update to 5.3.6
Published December 18, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4108
Medium · CVSS 6.4EPSS 0.79%Fix available
Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.3.5
Published December 14, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4089
Medium · CVSS 4.3EPSS 0.72%Fix available
Improper Access Control in snipe/snipe-it
snipe-it is vulnerable to Improper Access Control
snipe/snipe-it PHP
- Update to 5.3.4
Published December 10, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4075
Low · CVSS 2.7EPSS 0.92%Fix available
Server-Side Request Forgery (SSRF) in snipe/snipe-it
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
snipe/snipe-it PHP
- Update to 6.0.0-GM
Published December 6, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-4018
Medium · CVSS 6.3EPSS 0.66%Fix available
Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.3.3
Published December 1, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3961
High · CVSS 8EPSS 0.76%Fix available
Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.3.2
Published November 19, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3931
Medium · CVSS 4.3EPSS 0.44%No fix published
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe/snipe-it PHP
Published November 13, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3938
Low · CVSS 3.9EPSS 0.54%Fix available
Cross-site Scripting (XSS) - Generic in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.4.0
Published November 13, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3879
Medium · CVSS 6.8EPSS 0.83%Fix available
Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.3.0
Published October 19, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3863
Medium · CVSS 5.5EPSS 0.79%Fix available
Cross-site Scripting (XSS) - Generic in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
snipe/snipe-it PHP
- Update to 5.3.0
Published October 19, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-3858
Medium · CVSS 4.3EPSS 0.54%Fix available
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe/snipe-it PHP
- Update to 5.3.0
Published October 19, 2021Updated August 3, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

snipe/snipe-it vulnerabilities · Page 4

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

Old sessions are not blocked by the login enable function. in snipe/snipe-it

Generation of Error Message Containing Sensitive Information in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Observable Discrepancy in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Improper Access Control in snipe/snipe-it

Server-Side Request Forgery (SSRF) in snipe/snipe-it

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

Check your server