Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2022-1380

Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. The vulnerability is capable of stolen the user Cookie.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

snipe snipe/snipe-it

  • unspecified to < v5.4.3affected

References