repository icon
snipe / snipe-it Project repository

A free open source IT asset/license management system

Submit a report

FIRST INTERACTION

WITHIN1 DAY

REVIEW

WITHIN5 DAYS

FIX

WITHIN5 DAYS

CSRF in Send Reminder
hainguyen0207
Medium
•CVE-2023-5511
Open Redirect Vulnerability
hainguyen0207
self closed
Stored Cross Site Scripting (XSS)
shahzaibak96
Medium
•CVE-2023-5452
CSV Injection in CSV files generated by the backend
vautia
Low
Reflected XSS on searchbar (on top)
mike993
not applicable
Stored Cross-Site Scripting (XSS)
vautia
Medium
•CVE-2022-3035
Improper Authentication
vautia
Medium
•CVE-2022-3173
Session Fixation
vautia
Medium
•CVE-2022-2997
Username can be enumerated by password reset endpoint
imlonghao
Low
Able to create an user with a long password as well as long username
nithissh200
Low
Session cookie is not invalidated on logout
nerrorsec
pending
Stored Cross Site Scripting vulnerability in the checked_out_to parameter
mylong
Critical
•$55•CVE-2022-1445
purchase_cost can be set negative
minhnb11
not applicable
Incorrect Privilege Assignment
minhnb11
not applicable
Bussiness Logic Error at checkout function
minhnb11
pending
Stored Cross Site Scripting vulnerability in Item name parameter
asura-n
Critical
•$55•CVE-2022-1380
Old sessions are not blocked by the login enable function.
lekhang123lc
High
•$30•CVE-2022-1155
Improper Access Control
shubh123-tri
Medium
•$48.6•CVE-2022-1511
Exposure of Sensitive Information to an Unauthorized Actor
thebinitghimire
Medium
•CVE-2022-0569
Generation of Error Message Containing Sensitive Information
thebinitghimire
Medium
•$3.4•CVE-2022-0622
Improper Privilege Management
shubh123-tri
Medium
•$55•CVE-2022-0579
Incorrect Privilege Assignment
ranjit-git
Medium
•$66
Improper Privilege Management
ranjit-git
Medium
•$77•CVE-2022-0611
Improper Access Control
kstarkloff
Medium
•$33.4•CVE-2022-0178
Improper Access Control
haxatron
Medium
•$105•CVE-2022-0179
Cross-Site Request Forgery (CSRF)
haxatron
Medium
•$48.6•CVE-2021-4130
Cross-site Scripting (XSS) - Stored
laladee
Medium
•CVE-2021-4108
Improper Access Control
haxatron
Medium
•$95•CVE-2021-4089
Server-Side Request Forgery (SSRF)
haxatron
Low
•$106.4•CVE-2021-4075
Cross-site Scripting (XSS) - Stored
asura-n
Medium
•CVE-2021-4018
Cross-site Scripting (XSS) - Stored
khanhchauminh
High
•$40•CVE-2021-3961
Cross-Site Request Forgery (CSRF)
hdvinnie
Medium
•$39
Cross-site Scripting (XSS) - Generic
haxatron
Low
•$47.5•CVE-2021-3938
Cross-Site Request Forgery (CSRF)
haxatron
Medium
•$123.5•CVE-2021-3931
Cross-site Scripting (XSS) - Stored
noobpk
Medium
•CVE-2021-3879
Insufficient Granularity of Access Control
takester
Medium
•$40
Cross-site Scripting (XSS) - Generic
noobpk
Medium
•$10•CVE-2021-3863
Cross-Site Request Forgery (CSRF)
am0o0
Medium
•$120•CVE-2021-3858
The UI Performs the Wrong Action
asura-n
Medium
•$80