CVE-2019-10118

Published March 27th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.

grokability/snipe-it

A free open source IT asset/license management system

GitHub

13.9K