CVE-2021-3863 MEDIUM

CVE-2021-3863: Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Vendor Snipe

Product snipe/snipe-it

Weakness CWE-79 · XSS

Published October 19, 2021

Last update August 3, 2024

CVSS base score

5.5/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Key dates

October 19, 2021 CVE published

August 3, 2024 Record updated

External resources

Related vulnerabilities