Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2022-1445

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
@huntrdev

Description

Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

snipe snipe/snipe-it

  • unspecified to < 5.4.3affected

References