Snipeitapp: >> Snipe-It >> 5.3.10 Security Vulnerabilities
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.
CVSS Score
9.1
EPSS Score
0.008
Published
2022-04-16
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.
CVSS Score
7.4
EPSS Score
0.01
Published
2022-03-30
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.
CVSS Score
5.3
EPSS Score
0.01
Published
2022-02-17
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.
CVSS Score
6.3
EPSS Score
0.012
Published
2022-02-16
Page 6