Описание
Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| snipe-it | itp | package |
EPSS
Процентиль: 9%
0.00189
Низкий
Связанные уязвимости
CVSS3: 5.4
nvd
9 месяцев назад
Snipe-IT before 8.3.4 allows stored XSS via the Locations "Country" field, enabling a low-privileged authenticated user to inject JavaScript that executes in another user's session.
github
9 месяцев назад
Snipe-IT allows stored XSS via the Locations "Country" field
EPSS
Процентиль: 9%
0.00189
Низкий