Lucene search
Veracode Vulnerability DatabaseVERACODE:36317HistoryJul 11, 2022 - 4:23 p.m.
Remote Code Execution
2022-07-1116:23:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
24.1%
snipe/snipe-it is vulnerable to remote code execution. The vulnerability exists in the Select User function under the People Menu component which allows an attacker with admin privileges to inject remote code to a user via maliciously crafted pdf files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| snipe/snipe-it | le | v6.0.6 | |
| snipe/snipe-it | le | v6.0.6 |
Related
cve
cve
CVE-2022-32061
2022-07-07 23:15:07
osv
osv
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
2022-07-08 00:00:42
CVE-2022-32061
2022-07-07 23:15:07
cvelist
cvelist
CVE-2022-32061
2022-07-07 22:12:33
github
github
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
2022-07-08 00:00:42
nvd
nvd
CVE-2022-32061
2022-07-07 23:15:07
prion
prion
Design/Logic Flaw
2022-07-07 23:15:00