CVE-2022-3035
1 advisory.
Packagist/snipe/snipe-it CVE-2022-3035: medium 4.8, EPSS 0.74%
snipe-it vulnerable to cross-site scripting (XSS)
Action: Upgrade snipe/snipe-it to 6.0.11 or later.
composer require snipe/snipe-it:6.0.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.11 | - |
Fixed versions
| 6.0.11 |
Sources
- osv: GHSA-rff2-vqm3-jpv5
- https://nvd.nist.gov/vuln/detail/CVE-2022-3035
- https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae
- https://github.com/snipe/snipe-it
- https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902
CVE-2022-3035 · published · modified · JSON