Описание
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| snipe-it | itp | package |
EPSS
Процентиль: 12%
0.00218
Низкий
Связанные уязвимости
CVSS3: 4.8
nvd
3 месяца назад
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.
CVSS3: 4.8
github
3 месяца назад
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
EPSS
Процентиль: 12%
0.00218
Низкий