Description
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | snipe/snipe-it | < 4.6.14 | 4.6.14 | GHSA-fx98-8w93-4mxr |
Medium · 6.1
CVE-2019-10118
EUVD-2022-3852GHSA-fx98-8w93-4mxr
Snipe-IT XSS Vulnerability
Published Mar 27, 2019 · Updated Aug 4, 2024 · Assigned by mitre