CVE-2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Score

CVSS 3.0 6.4 Medium

Status

Modified - security@huntr.dev

Published

2021-12-14

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Snipesnipe-it (Snipe)
• Snipe-it (Snipeitapp)

References

• https://github.com/snipe/snipe-it/commit/9d5d1a9f9aae2c8baee48551185da5de0cdb62c2
• https://huntr.dev/bounties/5069a037-040e-4d77-8526-846e65edfaf4