medium5.4
CVE-2023-5452
Cross-site Scripting in snipe/snipe-it
Impact
Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.2.2.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | <= 6.2.1 | 6.2.2 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 6.2.2 |