Описание
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, users with component view access could be impacted by an unescaped notes column, resulting in cross-site scripting (XSS). This vulnerability is fixed in 8.4.1.
Уязвимые конфигурации
Конфигурация 1Версия до 8.4.1 (исключая)
cpe:2.3:a:snipeitapp:snipe-it:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00218
Низкий
4.8 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 4.8
debian
3 месяца назад
Snipe-IT is an IT asset/license management system. Prior to 8.4.1, use ...
CVSS3: 4.8
github
3 месяца назад
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
EPSS
Процентиль: 12%
0.00218
Низкий
4.8 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79