snipe vulnerabilities

CVEs per yearBy the year they were published

1. 202111
2. 202214
3. 20232
4. 20241

Newest CVEs

• CVE-2024-5685

  Broken Function Level Authorization (BFLA) in snipe/snipe-it

  snipe · snipe-it

  High7.6
• CVE-2023-5511

  Cross-Site Request Forgery (CSRF) in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium6.3
• CVE-2023-5452

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium5.5
• CVE-2022-3173

  Improper Authentication in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium4.3
• CVE-2022-3035

  Cross-site Scripting (XSS) - Stored in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium5.9
• CVE-2022-2997

  Session Fixation in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium4.6
• CVE-2022-23064

  Snipe-IT - Host Header Injection

  snipe · snipe-it

  High8.8
• CVE-2022-1511

  Missing Authorization in snipe/snipe-it

  snipe · snipe/snipe-it

  Medium6.5
• CVE-2022-1445

  Stored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it

  snipe · snipe/snipe-it

  Critical9.0
• CVE-2022-1380

  Stored Cross Site Scripting vulnerability in Item name parameter in snipe/snipe-it

  snipe · snipe/snipe-it

  Critical9.1