En bref
- CVE-2026-55464 est une vulnérabilité MOYENNE (CVSS 5.4) touchant snipe/snipe-it, snipe-it (snipeitapp).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 22.2% des vulnérabilités.
- Correctif : mettre à jour vers 8.6.2 ou plus récent.
Description
Impact
CommonMark is configured with html_input => 'escape', which blocks raw HTML injection. However, javascript: URIs in Markdown hyperlinks are not sanitized. A user with assets.edit permission can inject a malicious link into any markdown-textarea custom field. Any user who opens the asset detail page and clicks the link executes arbitrary JavaScript in their browser session.
NVD description
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with assets.edit permission to place a malicious link in a markdown-textarea custom field that executes arbitrary JavaScript when another user opens the asset detail page and clicks the link. This issue is fixed in version 8.6.2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free