Количество 3
Количество 3
CVE-2026-55481
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, default.blade.php renders header_color and related branding color settings inside a CSS style block with HTML escaping that is insufficient for the CSS context, allowing a superadmin to inject arbitrary CSS that affects authenticated users on subsequent page loads when Content Security Policy is disabled. This issue is fixed in version 8.6.2.
CVE-2026-55481
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, def ...
GHSA-w7qw-5wfv-gwx9
Snipe-IT has CSS Injection via `header_color` Setting
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-55481 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, default.blade.php renders header_color and related branding color settings inside a CSS style block with HTML escaping that is insufficient for the CSS context, allowing a superadmin to inject arbitrary CSS that affects authenticated users on subsequent page loads when Content Security Policy is disabled. This issue is fixed in version 8.6.2. | CVSS3: 4.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-55481 Snipe-IT is an IT asset/license management system. Prior to 8.6.2, def ... | CVSS3: 4.8 | 0% Низкий | 3 месяца назад |
| GHSA-w7qw-5wfv-gwx9 Snipe-IT has CSS Injection via `header_color` Setting | 0% Низкий | 26 дней назад |
Уязвимостей на страницу