Description
Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting (XSS) for View Assigned Assets.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | snipe/snipe-it | < 6.0.14 | 6.0.14 | GHSA-363q-j92x-7543 |
Medium · 5.4
CVE-2022-44380
EUVD-2022-7481GHSA-363q-j92x-7543
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
Published Dec 25, 2022 · Updated Apr 15, 2025 · Assigned by mitre