Lucene search
China National Vulnerability DatabaseCNVD-2021-89155HistoryNov 16, 2021 - 12:00 a.m.
Snipe-IT Cross-site Request Forgery Vulnerability
2021-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.001 Low
EPSS
Percentile
31.0%
Snipe-IT is an open source IT asset/license management system. Snipe-IT is vulnerable to cross-site request forgery, which stems from a lack of csrf checksum for POST requests in the software’s view.blade.php file, and can be exploited by attackers to launch cross-site request forgery attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe-it snipe-it | le | 5.3.1 |
Related
cve
cve
CVE-2021-3931
2021-11-13 09:15:06
osv
osv
CVE-2021-3931
2021-11-13 09:15:06
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
2021-11-15 23:19:09
cvelist
cvelist
CVE-2021-3931 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
2021-11-13 08:50:10
nvd
nvd
CVE-2021-3931
2021-11-13 09:15:06
github
github
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
2021-11-15 23:19:09
prion
prion
Cross site request forgery (csrf)
2021-11-13 09:15:00
huntr
huntr
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
2021-11-04 14:01:54