Total 71 security vulnerabilities recorded for snipeitapp software and firmware.
In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password r...
Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4....
Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is cap...
Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of ...
Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10....
Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11....
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11....
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9....
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9....
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8....
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)...
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API....