snipe/snipe-it
Open source asset management system built on Laravel.
Security Advisories for snipe/snipe-it in packagist
High
9 days ago
Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API
packagist
snipe/snipe-it
High
9 days ago
Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
packagist
snipe/snipe-it
High
about 1 month ago
Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT has CSS Injection via `header_color` Setting
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT has incorrect permission for legacy license checkin API
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT has missing object-level authorization in Kits API
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter
packagist
snipe/snipe-it
High
about 1 month ago
Snipe-IT vulnerable to directory traversal in displaySig
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT's API Location Creation Bypasses FMCS Parent-Child Company Boundary Validation
packagist
snipe/snipe-it
Low
about 1 month ago
Snipe-IT has a path traversal vulnerability via CSV import `image` field
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT vulnerable to stored XSS via inline-served attachment
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT vulnerable to stored XSS via Markdown custom field
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT has an authorization bypass on print inventory page
packagist
snipe/snipe-it
High
about 1 month ago
Snipe-IT has an authorization bypass on bulk editing users
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT has CSV formula injection in Activity Report export
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT: Stored DOM XSS via table selected-count IDs
packagist
snipe/snipe-it
Moderate
about 1 month ago
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
packagist
snipe/snipe-it
High
about 1 month ago
Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
packagist
snipe/snipe-it
High
about 1 month ago
Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode
packagist
snipe/snipe-it
High
3 months ago
Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection
packagist
snipe/snipe-it
Low
3 months ago
Snipe-IT's S3 signature image retrieval lacks authorization before temporary URL
packagist
snipe/snipe-it
Low
3 months ago
Snipe-IT has Improper Authorization in File Deletion (IDOR)
packagist
snipe/snipe-it
Moderate
3 months ago
Snipe-IT Vulnerable to Privilege Escalation via Missing admin Permission Check in User Creation
packagist
snipe/snipe-it
Moderate
3 months ago
Snipe-IT has Multi-Tenancy Bypass via Bulk Asset Update
packagist
snipe/snipe-it
Moderate
3 months ago
Snipe-IT Vulnerable to User Account Escalation via CSV Import
packagist
snipe/snipe-it
Moderate
3 months ago
Snipe-IT's TOTP is Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`
packagist
snipe/snipe-it
High
3 months ago
Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
packagist
snipe/snipe-it
Moderate
3 months ago
Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment
packagist
snipe/snipe-it
High
5 months ago
Snipe-IT has Privilege Escalation via API Permissions Assignment
packagist
snipe/snipe-it
Moderate
5 months ago
Snipe-IT has Stored XSS via Component Checkout Notes (v8.4.0)
packagist
snipe/snipe-it
High
7 months ago
Snipe-IT has sensitive user attributes related to account privileges that are insufficiently protected against mass assignment
packagist
snipe/snipe-it
Moderate
10 months ago
Snipe-IT allows stored XSS via the Locations "Country" field
packagist
snipe/snipe-it
Moderate
10 months ago
Snipe-IT is vulnerable to stored cross-site scripting
packagist
snipe/snipe-it
Moderate
11 months ago
Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow
packagist
snipe/snipe-it
Moderate
over 1 year ago
Grokability Snipe-IT has incorrect authorization for accessing asset information
packagist
snipe/snipe-it
High
over 2 years ago
Snipe-IT allows users to promote or demote themselves or other users
packagist
snipe/snipe-it
High
almost 3 years ago
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
packagist
snipe/snipe-it
Moderate
almost 4 years ago
Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets
packagist
snipe/snipe-it
Moderate
almost 4 years ago
Snipe-IT allows attackers to check whether a user account exists
packagist
snipe/snipe-it
Moderate
about 4 years ago
snipe-it vulnerable to cross-site scripting (XSS)
packagist
snipe/snipe-it
Moderate
about 4 years ago
Insufficient Session Expiration in snipe/snipe-it
packagist
snipe/snipe-it
Moderate
about 4 years ago
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting
packagist
snipe/snipe-it
Moderate
about 4 years ago
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
packagist
snipe/snipe-it
High
over 4 years ago
Old sessions not blocked by login enable function in Snipe-IT
packagist
snipe/snipe-it
Moderate
over 4 years ago
Generation of Error Message Containing Sensitive Information in Snipe-IT
packagist
snipe/snipe-it
Moderate
over 4 years ago
Exposure of Sensitive Information in snipe/snipe-it
packagist
snipe/snipe-it
Moderate
over 4 years ago
Incorrect Default Permissions and Improper Access Control in snipe-it
packagist
snipe/snipe-it
High
over 4 years ago
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
packagist
snipe/snipe-it
Moderate
almost 5 years ago
snipe-it is vulnerable to Improper Access Control
packagist
snipe/snipe-it
Moderate
almost 5 years ago
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
packagist
snipe/snipe-it