CVE-2021-3961

Опубликовано: 19 нояб. 2021

Источник: nvd

CVSS3: 8

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Ссылки

https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e
Patch
Third Party Advisory
https://huntr.dev/bounties/5987aed5-6613-4937-8a3e-d48009b7da10
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e
Patch
Third Party Advisory
https://huntr.dev/bounties/5987aed5-6613-4937-8a3e-d48009b7da10
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:snipeitapp:snipe-it:*:*:*:*:*:*:*:*

Версия до 5.3.2 (исключая)

EPSS

Процентиль: 55%

0.00326

Низкий

8 High

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2021-3961

CVSS3: 5.4

debian

около 4 лет назад

snipe-it is vulnerable to Improper Neutralization of Input During Web ...

GHSA-c65v-p733-9796

CVSS3: 8

github

около 4 лет назад

Cross-site Scripting in snipe/snipe-it

EPSS

Процентиль: 55%

0.00326

Низкий

8 High

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79