snipe/snipe-it vulnerabilities | LiveThreat CVE Feed

Product

snipe/snipe-it

by snipe · last CVE Oct 11, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities26 In the news0 Timeline

Severity mix

Critical 0High 7Medium 19Low 0

Severity

All severities26 Critical0 High7 Medium19 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add snipe/snipe-it to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-5511	8.8	0%	Oct 11	Cross-Site Request Forgery (CSRF) in snipe/snipe-it Affected: before v.6.2.3
CVE-2022-0611	8.8	1%	Feb 15	Missing Authorization in snipe/snipe-it Affected: before 5.3.11
CVE-2021-4130	8.8	0%	Dec 18	Cross-Site Request Forgery (CSRF) in snipe/snipe-it Affected: before 5.3.6
CVE-2021-3858	8.8	1%	Oct 19	Cross-Site Request Forgery (CSRF) in snipe/snipe-it Affected: before 5.3.0
CVE-2022-2997	8.0	1%	Aug 25	Session Fixation in snipe/snipe-it Affected: before 6.0.10
CVE-2022-1155	7.4	1%	Mar 30	Old sessions are not blocked by the login enable function. in snipe/snipe-it Affected: before 5.3.10
CVE-2021-4075	7.2	1%	Dec 6	Server-Side Request Forgery (SSRF) in snipe/snipe-it Affected: before none
CVE-2022-1511	6.5	1%	Apr 28	Missing Authorization in snipe/snipe-it Affected: before 5.4.4
CVE-2022-0579	6.5	1%	Feb 14	Missing Authorization in snipe/snipe-it Affected: before 5.3.9
CVE-2021-4108	6.1	1%	Dec 14	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before 5.3.5
CVE-2021-3863	6.1	1%	Oct 19	Cross-site Scripting (XSS) - Generic in snipe/snipe-it Affected: before 5.3.0
CVE-2023-5452	5.4	1%	Oct 6	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before v6.2.2
CVE-2022-1445	5.4	1%	Apr 24	Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it Affected: before 5.4.3
CVE-2022-1380	5.4	1%	Apr 16	Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it Affected: before v5.4.3
CVE-2022-0178	5.4	1%	Jan 13	Missing Authorization in snipe/snipe-it Affected: before 5.3.8
CVE-2022-0179	5.4	1%	Jan 12	Missing Authorization in snipe/snipe-it Affected: before 5.3.6
CVE-2021-4018	5.4	1%	Dec 1	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before 5.3.3
CVE-2021-3961	5.4	1%	Nov 19	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before 5.3.2
CVE-2021-3938	5.4	1%	Nov 13	Cross-site Scripting (XSS) - Generic in snipe/snipe-it Affected: through 5.3.1
CVE-2021-3879	5.4	1%	Oct 19	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before 5.3.0
CVE-2022-0622	5.3	1%	Feb 17	Generation of Error Message Containing Sensitive Information in snipe/snipe-it Affected: before 5.3.11
CVE-2022-3035	4.8	1%	Aug 29	Cross-site Scripting (XSS) - Stored in snipe/snipe-it Affected: before v6.0.11
CVE-2022-3173	4.3	1%	Sep 17	Improper Authentication in snipe/snipe-it Affected: before 6.0.10
CVE-2022-0569	4.3	1%	Feb 12	Observable Discrepancy in snipe/snipe-it Affected: before v5.3.9
CVE-2021-4089	4.3	1%	Dec 10	Improper Access Control in snipe/snipe-it Affected: before N/A
CVE-2021-3931	4.3	0%	Nov 13	Cross-Site Request Forgery (CSRF) in snipe/snipe-it Affected: through 5.3.1