CVE-2021-3863

Description

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected packages (1)

• Packagist/snipe/snipe-itfrom 0, < 5.3.0

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-3863
• PATCHhttps://github.com/snipe/snipe-it
• WEBhttps://github.com/snipe/snipe-it/commit/fc5efd857f61f7e45c61db567bb66612bcb53128
• WEBhttps://github.com/snipe/snipe-it/releases/tag/v5.3.0
• WEBhttps://huntr.dev/bounties/1dbc8d79-1b53-44a3-a576-faec78f29ba0