Stored cross-site scripting in Snipe-IT

2022-04-2500:00:49

Google

osv.dev

0.001 Low

EPSS

Percentile

21.4%

JSON

Snipe-IT prior to version 5.4.3 is vulnerable to stored cross-site scripting because the input to the checked_out_to parameter is not escaped. The vulnerability is capable of stealing a user’s cookie.

CPENameOperatorVersion
snipe/snipe-iteq1.2.4-beta
snipe/snipe-iteq4.1.1
snipe/snipe-iteq3.0-beta.3
snipe/snipe-iteq1.2.3-beta
snipe/snipe-iteq1.2.5
snipe/snipe-iteq4.0
snipe/snipe-iteq4.1.7
snipe/snipe-iteq5.3.3
snipe/snipe-iteq5.0.10
snipe/snipe-iteq5.0.11

Name	Operator	Version
snipe/snipe-it	eq	1.2.4-beta
snipe/snipe-it	eq	4.1.1
snipe/snipe-it	eq	3.0-beta.3
snipe/snipe-it	eq	1.2.3-beta
snipe/snipe-it	eq	1.2.5
snipe/snipe-it	eq	4.0
snipe/snipe-it	eq	4.1.7
snipe/snipe-it	eq	5.3.3
snipe/snipe-it	eq	5.0.10
snipe/snipe-it	eq	5.0.11