medium4.8
CVE-2022-3035
snipe-it vulnerable to cross-site scripting (XSS)
Impact
Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.0.11.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | < 6.0.11 | 6.0.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 6.0.11 |