Skip to content
OpenAdvisories

Package · Packagist

snipe/snipe-it

81 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2025-15602 Public exploit

    Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation

    Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment. An authenticated, low-privileged user can craft a malicious API request to modify restricted fields of …

    grokability snipe-it snipe/snipe-it Packagist
  • Medium 6.1
    CVE-2025-64027 Public exploit

    Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

    Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface.…

    snipe/snipe-it Packagist
  • Medium 6.4
    CVE-2025-59712 Public exploit

    Snipe-IT allows XSS

    Snipe-IT before 8.1.18 allows XSS.

    Snipeitapp Snipe-IT snipe/snipe-it Packagist
  • Medium 5.0
    CVE-2025-47226 Public exploit

    Grokability Snipe-IT has incorrect authorization for accessing asset information

    Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.

    Snipeitapp Snipe-IT snipe/snipe-it Packagist
  • Medium 4.8
    CVE-2022-32060 Public exploit

    Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings

    An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.

    snipe/snipe-it Packagist