~ / search / GHSA-rff2-vqm3-jpv5

GHSA-rff2-vqm3-jpv5

snipe-it vulnerable to cross-site scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-3035

Packages

EcosystemPackageAffectedFixed in
Packagist snipe/snipe-it < 6.0.11 6.0.11

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11.

References

External links from the advisory. They lead to third-party sites.