Snipeitapp

snipeitapp

71 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Snipe It

snipe-it

71 CVEs

CVEs (71)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5452 1Snipeitapp 1Snipe It Jun 17, 2026 Oct 6, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.2.2.
CVE-2022-44381 1Snipeitapp 1Snipe It Jun 17, 2026 Dec 25, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.
CVE-2022-44380 1Snipeitapp 1Snipe It Jun 17, 2026 Dec 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting (XSS) for View Assigned Assets.
CVE-2022-3173 1Snipeitapp 1Snipe It Jun 17, 2026 Sep 17, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.
CVE-2022-3035 1Snipeitapp 1Snipe It Jun 17, 2026 Aug 29, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11.
CVE-2022-2997 1Snipeitapp 1Snipe It Jun 17, 2026 Aug 25, 2022 N/A· v4 8.0 HIGH· v3 N/A· v2 Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.
CVE-2022-32061 1Snipeitapp 1Snipe It Jun 17, 2026 Jul 7, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 An arbitrary file upload vulnerability in the Select User function under the People Menu component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
CVE-2022-32060 1Snipeitapp 1Snipe It Jun 17, 2026 Jul 7, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.
CVE-2022-23064 1Snipeitapp 1Snipe It Jun 17, 2026 May 2, 2022 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which onc...Show more In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.Show less
CVE-2022-1511 1Snipeitapp 1Snipe It Jun 17, 2026 Apr 28, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.
CVE-2022-1445 1Snipeitapp 1Snipe It Jun 17, 2026 Apr 24, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.
CVE-2022-1380 1Snipeitapp 1Snipe It Jun 17, 2026 Apr 16, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.
CVE-2022-1155 1Snipeitapp 1Snipe It Jun 17, 2026 Mar 30, 2022 N/A· v4 7.4 HIGH· v3 6.5 MEDIUM· v2 Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
CVE-2022-0622 1Snipeitapp 1Snipe It Jun 17, 2026 Feb 17, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0611 1Snipeitapp 1Snipe It Jun 17, 2026 Feb 16, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
CVE-2022-0579 1Snipeitapp 1Snipe It Jun 17, 2026 Feb 14, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
CVE-2022-0569 1Snipeitapp 1Snipe It Jun 17, 2026 Feb 14, 2022 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
CVE-2022-0178 1Snipeitapp 1Snipe It Jun 17, 2026 Jan 13, 2022 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.
CVE-2022-0179 1Snipeitapp 1Snipe It Jun 17, 2026 Jan 12, 2022 N/A· v4 5.4 MEDIUM· v3 4.9 MEDIUM· v2 snipe-it is vulnerable to Missing Authorization
CVE-2021-4130 1Snipeitapp 1Snipe It Jun 17, 2026 Dec 18, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

Previous 1 234 Next