Snipe vulnerabilities
28 CVEs and advisories name Snipe as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-5685Broken Function Level Authorization (BFLA) in snipe/snipe-it
- CVE-2023-5511Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2023-5452Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2022-3173Improper Authentication in snipe/snipe-it
- CVE-2022-3035Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2022-2997Session Fixation in snipe/snipe-it
- CVE-2022-23064Snipe-IT - Host Header Injection
- CVE-2022-1511Missing Authorization in snipe/snipe-it
- CVE-2022-1445Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it
- CVE-2022-1380Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it
- CVE-2022-1155Old sessions are not blocked by the login enable function. in snipe/snipe-it
- CVE-2022-0622Generation of Error Message Containing Sensitive Information in snipe/snipe-it
- CVE-2022-0611Missing Authorization in snipe/snipe-it
- CVE-2022-0579Missing Authorization in snipe/snipe-it
- CVE-2022-0569Observable Discrepancy in snipe/snipe-it
- CVE-2022-0178Missing Authorization in snipe/snipe-it
- CVE-2022-0179Missing Authorization in snipe/snipe-it
- CVE-2021-4130Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2021-4108Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2021-4089Improper Access Control in snipe/snipe-it
- CVE-2021-4075Server-Side Request Forgery (SSRF) in snipe/snipe-it
- CVE-2021-4018Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2021-3961Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2021-3931Cross-Site Request Forgery (CSRF) in snipe/snipe-it
- CVE-2021-3938Cross-site Scripting (XSS) - Generic in snipe/snipe-it
- CVE-2021-3879Cross-site Scripting (XSS) - Stored in snipe/snipe-it
- CVE-2021-3863Cross-site Scripting (XSS) - Generic in snipe/snipe-it
- CVE-2021-3858Cross-Site Request Forgery (CSRF) in snipe/snipe-it