high8.8
CVE-2021-3858
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Impact
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 5.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3
- https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6b
- https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3
- https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6b