it_open_source_asset_management vulnerabilities

CVEs whose affected-version data names the it_open_source_asset_management package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2019-25264Medium· 6.4PoC

9mo ago

Snipe-IT Open Source Asset Management 4.7.5 - Persistent Cross-Site Scripting

Snipe-IT 4.7.5 contains a persistent cross-site scripting vulnerability that allows authorized users to upload malicious SVG files with embedded JavaScript. Attackers can craft SVG files with script tags to execute arbitrary JavaScript w…

▾ TwilightSnipeitapp · IT Open Source Asset ManagementEPSS 0.29%via CVEORG