Cross-Site Request Forgery (CSRF) in snipe/snipe-it

ALTO 8.8CVE-2023-5511 · GHSA-33vj-r6p6-x4p8 · Published 11/10/2023 · updated 17/06/2026

In breve

CVE-2023-5511 è una vulnerabilità ALTO (CVSS 8.8) che riguarda snipe/snipe-it, snipe-it (snipeitapp).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.30%, superiore al 23.1% delle vulnerabilità.
Correzione: aggiornare a 6.2.3 o successiva.

Package	Affected versions	Patched versions
snipe/snipe-it Packagist	`< 6.2.3`	`6.2.3`
snipe-it snipeitapp	`< 6.2.3`	`6.2.3`

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

NVD description

Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 6.2.3

6.2.3

< 6.2.3

6.2.3

Altre vulnerabilità di snipe/snipe-it

Vedi tutto →