{"action":"Upgrade snipe/snipe-it to 6.0.11 or later.","affected":[{"fixed":"6.0.11","introduced":"0"}],"component":"snipe/snipe-it","cve_ids":["CVE-2022-3035"],"ecosystem":"Packagist","epss":0.00743,"exploited":false,"fixed_versions":["6.0.11"],"ghsa_id":"GHSA-rff2-vqm3-jpv5","id":"tcs_01M5KF86SZAPRK201DCTSKFXAG","modified_at":"2023-11-08T04:09:17.814932Z","published_at":"2022-08-30T00:00:29Z","references":["https://osv.dev/vulnerability/GHSA-rff2-vqm3-jpv5","https://nvd.nist.gov/vuln/detail/CVE-2022-3035","https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae","https://github.com/snipe/snipe-it","https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-rff2-vqm3-jpv5","url":"https://osv.dev/vulnerability/GHSA-rff2-vqm3-jpv5"}],"summary":"snipe-it vulnerable to cross-site scripting (XSS)"}