CVE-2022-32060
1 advisory.
Packagist/snipe/snipe-it CVE-2022-32060: medium 4.8
Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.0.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w82x-xjjr-cjr5
- https://nvd.nist.gov/vuln/detail/CVE-2022-32060
- https://github.com/bypazs/CVE-2022-32060
- https://github.com/snipe/snipe-it
- https://grimthereaperteam.medium.com/snipe-it-version-v6-0-2-file-upload-cross-site-scripting-b15becc1a5ea
CVE-2022-32060 · published · modified · JSON