Snipeitapp Snipe-IT any version

Server-Side Request Forgery (SSRF) in snipe/snipe-it

Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field

Snipe-IT: Directory traversal in displaySig

Snipe-IT: Authorization bypass on bulk editing users

Snipe-IT before 8.7.0 License Key Exposure via CSV Export

Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint

Snipe-IT before 8.7.0 Information Disclosure via Custom Fields

Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components

Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer

Snipe-IT 8.6.3 Race Condition via Consumable Checkout

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users

Snipe-IT: Open redirect vulnerability

Snipe-IT: Improper Privilege Management

snipe-it before 8.7.0 Data Loss via Failed Image Write

Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Snipe-IT before 7.0.10 allows remote code execution (associated with cookie serialization) when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values.

Missing Authorization in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Snipe-IT: Path traversal vulnerability via CSV import `image` field

Snipe-IT: User Account Escalation via CSV Import

Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report

Snipe-IT's selectlist visibility is too permissive

Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Snipe-IT before 8.1.18 allows XSS.

Missing Authorization in snipe/snipe-it

Cross-site Scripting (XSS) - Stored in snipe/snipe-it

Missing Authorization in snipe/snipe-it

Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT: 2FA reset privilege bypass

Snipe-IT: Stored DOM XSS via table selected-count IDs

Snipe-IT: CSS Injection via `header_color` Setting

Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.

Cross-site Scripting (XSS) - Generic in snipe/snipe-it

Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState

Snipe-IT: Open Redirect After User Edit

Cross-site Scripting (XSS) - Stored in snipe/snipe-it