high8.8
CVE-2023-5511
Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Impact
Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | <= 6.2.2 | 6.2.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 6.2.3 |