# cve.now: Snipe

The newest entries naming Snipe as an affected vendor (up to 200), of 28 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-5685](https://cve.now/CVE-2024-5685.md): Broken Function Level Authorization (BFLA) in snipe/snipe-it (CVSS 7.6)
- [CVE-2023-5511](https://cve.now/CVE-2023-5511.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 6.3)
- [CVE-2023-5452](https://cve.now/CVE-2023-5452.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 5.5)
- [CVE-2022-3173](https://cve.now/CVE-2022-3173.md): Improper Authentication in snipe/snipe-it (CVSS 4.3)
- [CVE-2022-3035](https://cve.now/CVE-2022-3035.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 5.9)
- [CVE-2022-2997](https://cve.now/CVE-2022-2997.md): Session Fixation in snipe/snipe-it (CVSS 4.6)
- [CVE-2022-23064](https://cve.now/CVE-2022-23064.md): Snipe-IT - Host Header Injection (CVSS 8.8)
- [CVE-2022-1511](https://cve.now/CVE-2022-1511.md): Missing Authorization in snipe/snipe-it (CVSS 6.5)
- [CVE-2022-1445](https://cve.now/CVE-2022-1445.md): Stored Cross Site Scripting vulnerability in the checked\_out\_to parameter in snipe/snipe-it (CVSS 9.0)
- [CVE-2022-1380](https://cve.now/CVE-2022-1380.md): Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it (CVSS 9.1)
- [CVE-2022-1155](https://cve.now/CVE-2022-1155.md): Old sessions are not blocked by the login enable function. in snipe/snipe-it (CVSS 7.4)
- [CVE-2022-0622](https://cve.now/CVE-2022-0622.md): Generation of Error Message Containing Sensitive Information in snipe/snipe-it (CVSS 5.3)
- [CVE-2022-0611](https://cve.now/CVE-2022-0611.md): Missing Authorization in snipe/snipe-it (CVSS 6.3)
- [CVE-2022-0579](https://cve.now/CVE-2022-0579.md): Missing Authorization in snipe/snipe-it (CVSS 6.5)
- [CVE-2022-0569](https://cve.now/CVE-2022-0569.md): Observable Discrepancy in snipe/snipe-it (CVSS 5.3)
- [CVE-2022-0178](https://cve.now/CVE-2022-0178.md): Missing Authorization in snipe/snipe-it (CVSS 6.3)
- [CVE-2022-0179](https://cve.now/CVE-2022-0179.md): Missing Authorization in snipe/snipe-it (CVSS 6.3)
- [CVE-2021-4130](https://cve.now/CVE-2021-4130.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 4.3)
- [CVE-2021-4108](https://cve.now/CVE-2021-4108.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 6.4)
- [CVE-2021-4089](https://cve.now/CVE-2021-4089.md): Improper Access Control in snipe/snipe-it (CVSS 4.3)
- [CVE-2021-4075](https://cve.now/CVE-2021-4075.md): Server-Side Request Forgery (SSRF) in snipe/snipe-it (CVSS 2.7)
- [CVE-2021-4018](https://cve.now/CVE-2021-4018.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 6.3)
- [CVE-2021-3961](https://cve.now/CVE-2021-3961.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 8.0)
- [CVE-2021-3931](https://cve.now/CVE-2021-3931.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 4.3)
- [CVE-2021-3938](https://cve.now/CVE-2021-3938.md): Cross-site Scripting (XSS) - Generic in snipe/snipe-it (CVSS 3.9)
- [CVE-2021-3879](https://cve.now/CVE-2021-3879.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 6.8)
- [CVE-2021-3863](https://cve.now/CVE-2021-3863.md): Cross-site Scripting (XSS) - Generic in snipe/snipe-it (CVSS 5.5)
- [CVE-2021-3858](https://cve.now/CVE-2021-3858.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/snipe
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.