Packagist/snipe/snipe-it CVE-2021-3931: medium 4.3, EPSS 0.44%
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-533p-cp2g-99wp
- https://nvd.nist.gov/vuln/detail/CVE-2021-3931
- https://github.com/snipe/snipe-it/commit/0d811d067c8e064252c0143c39d6cd4c3133679e
- https://github.com/snipe/snipe-it
- https://huntr.dev/bounties/03b21d69-3bf5-4b2f-a2cf-872dd677a68f
CVE-2021-3931 · published · modified · JSON