Vulnerabilities (CVE)

Filtered by vendor Snipeitapp Subscribe
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3858 1 Snipeitapp 1 Snipe-it 2024-11-21 6.8 MEDIUM 8.8 HIGH
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2019-10118 1 Snipeitapp 1 Snipe-it 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.