Lucene search
Veracode Vulnerability DatabaseVERACODE:13558HistoryMar 28, 2019 - 2:13 a.m.
Cross-Site Scripting (XSS)
2019-03-2802:13:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
EPSS
0.001
Percentile
33.8%
snipe/snipe-it is vulnerable to cross-site scripting (XSS). User input are not escaped before being displayed on a user’s browser, allowing remote attackers to inject arbitrary Javascript into a victim’s browser via log_meta values and user’s last name in the API.
References
Related
cvelist
cvelist
CVE-2019-10118
2019-03-27 03:54:11
cve
cve
CVE-2019-10118
2019-03-27 04:29:01
osv
osv
Snipe-IT XSS Vulnerability
2022-05-14 01:14:56
CVE-2019-10118
2019-03-27 04:29:01
nvd
nvd
CVE-2019-10118
2019-03-27 04:29:01
github
github
Snipe-IT XSS Vulnerability
2022-05-14 01:14:56
prion
prion
Cross site scripting
2019-03-27 04:29:00