{"url":"http://public2.vulnerablecode.io/api/packages/519315?format=json","purl":"pkg:composer/snipe/snipe-it@5.1.3","type":"composer","namespace":"snipe","name":"snipe-it","version":"5.1.3","qualifiers":{},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":"6.2.3","latest_non_vulnerable_version":"8.4.1","affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/343302?format=json","vulnerability_id":"VCID-14bz-dte7-juay","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3863","reference_id":"","reference_type":"","scores":[{"value":"0.00238","scoring_system":"epss","scoring_elements":"0.47133","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3863"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/fc5efd857f61f7e45c61db567bb66612bcb53128","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/fc5efd857f61f7e45c61db567bb66612bcb53128"},{"reference_url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.0","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.0"},{"reference_url":"https://huntr.dev/bounties/1dbc8d79-1b53-44a3-a576-faec78f29ba0","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/1dbc8d79-1b53-44a3-a576-faec78f29ba0"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3863","reference_id":"","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3863"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/382173?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mpv-u96h-a7dm"},{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-fa65-f6am-efgj"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-m4sh-qung-vfbq"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-sw8p-bapa-sbc8"},{"vulnerability":"VCID-sx4p-2hvz-eue4"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-w4pf-389e-gudt"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.0"}],"aliases":["CVE-2021-3863","GHSA-5rg2-6qr5-2xp8"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-14bz-dte7-juay"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206917?format=json","vulnerability_id":"VCID-2mpv-u96h-a7dm","summary":"Server-Side Request Forgery in snipe/snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4075","reference_id":"","reference_type":"","scores":[{"value":"0.00274","scoring_system":"epss","scoring_elements":"0.51166","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4075"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e"},{"reference_url":"https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de","reference_id":"","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4075","reference_id":"CVE-2021-4075","reference_type":"","scores":[{"value":"7.2","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4075"},{"reference_url":"https://github.com/advisories/GHSA-553q-hpvp-q8pc","reference_id":"GHSA-553q-hpvp-q8pc","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-553q-hpvp-q8pc"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18312?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.0-GM","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.0-GM"}],"aliases":["CVE-2021-4075","GHSA-553q-hpvp-q8pc"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-2mpv-u96h-a7dm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211246?format=json","vulnerability_id":"VCID-6hks-9uk3-23at","summary":"Insufficient Session Expiration in snipe/snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-2997","reference_id":"","reference_type":"","scores":[{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.58044","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-2997"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1"},{"reference_url":"https://huntr.dev/bounties/c09bf21b-50d2-49f0-8c92-49f6b3c358d8","reference_id":"","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/c09bf21b-50d2-49f0-8c92-49f6b3c358d8"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2997","reference_id":"CVE-2022-2997","reference_type":"","scores":[{"value":"4.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2997"},{"reference_url":"https://github.com/advisories/GHSA-cmxc-9ghj-jp87","reference_id":"GHSA-cmxc-9ghj-jp87","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-cmxc-9ghj-jp87"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/25867?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.10"}],"aliases":["CVE-2022-2997","GHSA-cmxc-9ghj-jp87"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6hks-9uk3-23at"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/207542?format=json","vulnerability_id":"VCID-6zw4-uug8-yfd9","summary":"Improper Access Control in snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0178","reference_id":"","reference_type":"","scores":[{"value":"0.00213","scoring_system":"epss","scoring_elements":"0.43861","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0178"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/0e5ef53c352754de2778ffa20c85da15fd6f7ae0","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/0e5ef53c352754de2778ffa20c85da15fd6f7ae0"},{"reference_url":"https://github.com/snipe/snipe-it/commit/512dbfee7acfcafa1524c8b2fb4cc4ef96958d0b","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/512dbfee7acfcafa1524c8b2fb4cc4ef96958d0b"},{"reference_url":"https://huntr.dev/bounties/81c6b974-d0b3-410b-a902-8324a55b1368","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/81c6b974-d0b3-410b-a902-8324a55b1368"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0178","reference_id":"CVE-2022-0178","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0178"},{"reference_url":"https://github.com/advisories/GHSA-xc47-3rch-cv57","reference_id":"GHSA-xc47-3rch-cv57","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-xc47-3rch-cv57"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18821?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.8"}],"aliases":["CVE-2022-0178","GHSA-xc47-3rch-cv57"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-6zw4-uug8-yfd9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/133604?format=json","vulnerability_id":"VCID-7kdb-yy6k-ebd1","summary":"Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5511","reference_id":"","reference_type":"","scores":[{"value":"0.00113","scoring_system":"epss","scoring_elements":"0.29478","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5511"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5511","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5511"},{"reference_url":"https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf","reference_id":"43206801-9862-48da-b379-e55e341d78bf","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:11:33Z/"}],"url":"https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf"},{"reference_url":"https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed","reference_id":"6d55d782806c9660e9e65dc5250faacb5d0033ed","reference_type":"","scores":[{"value":"6.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:11:33Z/"}],"url":"https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed"},{"reference_url":"https://github.com/advisories/GHSA-33vj-r6p6-x4p8","reference_id":"GHSA-33vj-r6p6-x4p8","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-33vj-r6p6-x4p8"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/379120?format=json","purl":"pkg:composer/snipe/snipe-it@6.2.3","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.2.3"}],"aliases":["CVE-2023-5511","GHSA-33vj-r6p6-x4p8"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-7kdb-yy6k-ebd1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211263?format=json","vulnerability_id":"VCID-925h-gz4a-xqf2","summary":"snipe-it vulnerable to cross-site scripting (XSS)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3035","reference_id":"","reference_type":"","scores":[{"value":"0.00256","scoring_system":"epss","scoring_elements":"0.49322","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3035"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/9cf5f30c77df6ab60baab1c0e6bb0b4e773f0eae"},{"reference_url":"https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/0bbb1046-ea9e-4cb9-bc91-b294a72d1902"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3035","reference_id":"CVE-2022-3035","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3035"},{"reference_url":"https://github.com/advisories/GHSA-rff2-vqm3-jpv5","reference_id":"GHSA-rff2-vqm3-jpv5","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rff2-vqm3-jpv5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/25905?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.11"}],"aliases":["CVE-2022-3035","GHSA-rff2-vqm3-jpv5"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-925h-gz4a-xqf2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208814?format=json","vulnerability_id":"VCID-c3sg-db87-9ff8","summary":"Cross-site Scripting in snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1380","reference_id":"","reference_type":"","scores":[{"value":"0.00249","scoring_system":"epss","scoring_elements":"0.48435","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1380"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/f211c11034baf4281aa62e7b5e0347248d995ee9","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/f211c11034baf4281aa62e7b5e0347248d995ee9"},{"reference_url":"https://huntr.dev/bounties/3d45cfca-3a72-4578-b735-98837b998a12","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/3d45cfca-3a72-4578-b735-98837b998a12"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1380","reference_id":"CVE-2022-1380","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1380"},{"reference_url":"https://github.com/advisories/GHSA-p885-prv3-m4xv","reference_id":"GHSA-p885-prv3-m4xv","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-p885-prv3-m4xv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20145?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.3"}],"aliases":["CVE-2022-1380","GHSA-p885-prv3-m4xv"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-c3sg-db87-9ff8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208157?format=json","vulnerability_id":"VCID-d9f2-h26a-dyam","summary":"Exposure of Sensitive Information in snipe/snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0569","reference_id":"","reference_type":"","scores":[{"value":"0.00356","scoring_system":"epss","scoring_elements":"0.58281","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0569"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/05c0819776b07425b2831cd31a8a0f4e7ac30c09","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/05c0819776b07425b2831cd31a8a0f4e7ac30c09"},{"reference_url":"https://huntr.dev/bounties/b41d5e63-bcd8-4864-8a2e-8ec74eec520b","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/b41d5e63-bcd8-4864-8a2e-8ec74eec520b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0569","reference_id":"CVE-2022-0569","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0569"},{"reference_url":"https://github.com/advisories/GHSA-qpv2-jxc7-3638","reference_id":"GHSA-qpv2-jxc7-3638","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qpv2-jxc7-3638"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19368?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.10"}],"aliases":["CVE-2022-0569","GHSA-qpv2-jxc7-3638"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d9f2-h26a-dyam"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/207533?format=json","vulnerability_id":"VCID-dvgd-81c2-e3ee","summary":"Incorrect Default Permissions and Improper Access Control in snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0179","reference_id":"","reference_type":"","scores":[{"value":"0.00221","scoring_system":"epss","scoring_elements":"0.44825","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0179"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e"},{"reference_url":"https://github.com/snipe/snipe-it/pull/10498","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/pull/10498"},{"reference_url":"https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0179","reference_id":"CVE-2022-0179","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0179"},{"reference_url":"https://github.com/advisories/GHSA-w3v3-cxq5-9vr4","reference_id":"GHSA-w3v3-cxq5-9vr4","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-w3v3-cxq5-9vr4"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18815?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.7"}],"aliases":["CVE-2022-0179","GHSA-w3v3-cxq5-9vr4"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dvgd-81c2-e3ee"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/209010?format=json","vulnerability_id":"VCID-f2cp-ca22-gba8","summary":"Improper Access Control in snipe/snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1511","reference_id":"","reference_type":"","scores":[{"value":"0.00255","scoring_system":"epss","scoring_elements":"0.49163","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1511"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/2e9cf8fa87a025c0eac9f79f4864b3fdd33a950c","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/2e9cf8fa87a025c0eac9f79f4864b3fdd33a950c"},{"reference_url":"https://github.com/snipe/snipe-it/pull/10991","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/pull/10991"},{"reference_url":"https://huntr.dev/bounties/4a1723e9-5bc4-4c4b-bceb-1c45964cc71d","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/4a1723e9-5bc4-4c4b-bceb-1c45964cc71d"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1511","reference_id":"CVE-2022-1511","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1511"},{"reference_url":"https://github.com/advisories/GHSA-p2vw-f87c-q597","reference_id":"GHSA-p2vw-f87c-q597","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-p2vw-f87c-q597"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20357?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.4"},{"url":"http://public2.vulnerablecode.io/api/packages/19952?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.0-RC-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.0-RC-1"}],"aliases":["CVE-2022-1511","GHSA-p2vw-f87c-q597"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-f2cp-ca22-gba8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206588?format=json","vulnerability_id":"VCID-fa65-f6am-efgj","summary":"snipe-it is vulnerable to Cross-site Scripting","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3938","reference_id":"","reference_type":"","scores":[{"value":"0.00226","scoring_system":"epss","scoring_elements":"0.45507","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3938"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/9ed1442bd124710f4178992cc4eca5236c7396b9","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/9ed1442bd124710f4178992cc4eca5236c7396b9"},{"reference_url":"https://huntr.dev/bounties/198a0d67-9189-4170-809b-0f8aea43b063","reference_id":"","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/198a0d67-9189-4170-809b-0f8aea43b063"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3938","reference_id":"CVE-2021-3938","reference_type":"","scores":[{"value":"3.9","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3938"},{"reference_url":"https://github.com/advisories/GHSA-2cqg-q7jm-j35c","reference_id":"GHSA-2cqg-q7jm-j35c","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-2cqg-q7jm-j35c"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18021?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.0"}],"aliases":["CVE-2021-3938","GHSA-2cqg-q7jm-j35c"],"risk_score":1.4,"exploitability":"0.5","weighted_severity":"2.7","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fa65-f6am-efgj"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/343305?format=json","vulnerability_id":"VCID-fexj-7y7v-x7d3","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3879","reference_id":"","reference_type":"","scores":[{"value":"0.00453","scoring_system":"epss","scoring_elements":"0.64218","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3879"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/bda23bb1e66fd7ce42c75c69cf5eea4e80865c1c","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/bda23bb1e66fd7ce42c75c69cf5eea4e80865c1c"},{"reference_url":"https://huntr.dev/bounties/6dccc49e-3843-4a4a-b397-5c659e5f8bfe","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/6dccc49e-3843-4a4a-b397-5c659e5f8bfe"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3879","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3879"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/382173?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mpv-u96h-a7dm"},{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-fa65-f6am-efgj"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-m4sh-qung-vfbq"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-sw8p-bapa-sbc8"},{"vulnerability":"VCID-sx4p-2hvz-eue4"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-w4pf-389e-gudt"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.0"}],"aliases":["CVE-2021-3879","GHSA-9g3v-j3cr-6fc6"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fexj-7y7v-x7d3"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/133384?format=json","vulnerability_id":"VCID-hmss-qvuy-rfcx","summary":"Cross-site Scripting (XSS) - Stored in GitHub repository snipe/snipe-it prior to v6.2.2.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5452","reference_id":"","reference_type":"","scores":[{"value":"0.00115","scoring_system":"epss","scoring_elements":"0.29802","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-5452"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5452","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5452"},{"reference_url":"https://huntr.dev/bounties/d6ed5ac1-2ad6-45fd-9492-979820bf60c8","reference_id":"d6ed5ac1-2ad6-45fd-9492-979820bf60c8","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T14:16:22Z/"}],"url":"https://huntr.dev/bounties/d6ed5ac1-2ad6-45fd-9492-979820bf60c8"},{"reference_url":"https://github.com/snipe/snipe-it/commit/eea2eabaeef16fc8f3a1d61b19c06e9fc8ed942a","reference_id":"eea2eabaeef16fc8f3a1d61b19c06e9fc8ed942a","reference_type":"","scores":[{"value":"5.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"},{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T14:16:22Z/"}],"url":"https://github.com/snipe/snipe-it/commit/eea2eabaeef16fc8f3a1d61b19c06e9fc8ed942a"},{"reference_url":"https://github.com/advisories/GHSA-rr5c-69c9-gj9f","reference_id":"GHSA-rr5c-69c9-gj9f","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-rr5c-69c9-gj9f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/379287?format=json","purl":"pkg:composer/snipe/snipe-it@6.2.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kdb-yy6k-ebd1"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.2.2"}],"aliases":["CVE-2023-5452","GHSA-rr5c-69c9-gj9f"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hmss-qvuy-rfcx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206670?format=json","vulnerability_id":"VCID-m4sh-qung-vfbq","summary":"Cross-site Scripting in snipe/snipe-it","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3961","reference_id":"","reference_type":"","scores":[{"value":"0.00326","scoring_system":"epss","scoring_elements":"0.5596","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3961"},{"reference_url":"https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e","reference_id":"","reference_type":"","scores":[{"value":"8.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e"},{"reference_url":"https://huntr.dev/bounties/5987aed5-6613-4937-8a3e-d48009b7da10","reference_id":"","reference_type":"","scores":[{"value":"8.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/5987aed5-6613-4937-8a3e-d48009b7da10"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3961","reference_id":"CVE-2021-3961","reference_type":"","scores":[{"value":"8.0","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3961"},{"reference_url":"https://github.com/advisories/GHSA-c65v-p733-9796","reference_id":"GHSA-c65v-p733-9796","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-c65v-p733-9796"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18101?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mpv-u96h-a7dm"},{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-sw8p-bapa-sbc8"},{"vulnerability":"VCID-sx4p-2hvz-eue4"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.2"}],"aliases":["CVE-2021-3961","GHSA-c65v-p733-9796"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-m4sh-qung-vfbq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/164052?format=json","vulnerability_id":"VCID-mfeg-t1ta-a3ck","summary":"Snipe-IT before 6.0.14 is vulnerable to Cross Site Scripting (XSS) for View Assigned Assets.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-44380","reference_id":"","reference_type":"","scores":[{"value":"0.00233","scoring_system":"epss","scoring_elements":"0.46307","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-44380"},{"reference_url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44380","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44380"},{"reference_url":"https://github.com/advisories/GHSA-363q-j92x-7543","reference_id":"GHSA-363q-j92x-7543","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-363q-j92x-7543"},{"reference_url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it/","reference_id":"multiple-vulnerabilities-in-snipe-it","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T13:22:03Z/"}],"url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it/"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/383910?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.14","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.14"}],"aliases":["CVE-2022-44380","GHSA-363q-j92x-7543"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-mfeg-t1ta-a3ck"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208216?format=json","vulnerability_id":"VCID-nddv-x2uq-vyeu","summary":"Improper Privilege Management in Snipe-IT","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0611","reference_id":"","reference_type":"","scores":[{"value":"0.00294","scoring_system":"epss","scoring_elements":"0.53108","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0611"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/321be4733d3997fc738f0118e1b9af5905f95439","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/321be4733d3997fc738f0118e1b9af5905f95439"},{"reference_url":"https://huntr.dev/bounties/7b7447fc-f1b0-446c-b016-ee3f6511010b","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/7b7447fc-f1b0-446c-b016-ee3f6511010b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0611","reference_id":"CVE-2022-0611","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0611"},{"reference_url":"https://github.com/advisories/GHSA-j57w-3c39-gpp5","reference_id":"GHSA-j57w-3c39-gpp5","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-j57w-3c39-gpp5"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19442?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.11","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.11"},{"url":"http://public2.vulnerablecode.io/api/packages/18021?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/19952?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.0-RC-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.0-RC-1"}],"aliases":["CVE-2022-0611","GHSA-j57w-3c39-gpp5"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-nddv-x2uq-vyeu"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/209223?format=json","vulnerability_id":"VCID-pqxq-5v7x-rydd","summary":"snipe-IT vulnerable to host header injection","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23064","reference_id":"","reference_type":"","scores":[{"value":"0.00444","scoring_system":"epss","scoring_elements":"0.63784","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-23064"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/0c4768fd2a11ac26a61814cef23a71061bfd8bcc","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/0c4768fd2a11ac26a61814cef23a71061bfd8bcc"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23064","reference_id":"CVE-2022-23064","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23064"},{"reference_url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23064","reference_id":"CVE-2022-23064","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23064"},{"reference_url":"https://github.com/advisories/GHSA-9vh6-qfv6-vcqp","reference_id":"GHSA-9vh6-qfv6-vcqp","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9vh6-qfv6-vcqp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18821?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.8"},{"url":"http://public2.vulnerablecode.io/api/packages/18021?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.0"}],"aliases":["CVE-2022-23064","GHSA-9vh6-qfv6-vcqp"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pqxq-5v7x-rydd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206966?format=json","vulnerability_id":"VCID-q6b1-jhef-8fap","summary":"snipe-it is vulnerable to Cross-site Scripting","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4108","reference_id":"","reference_type":"","scores":[{"value":"0.00225","scoring_system":"epss","scoring_elements":"0.45445","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4108"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/9d5d1a9f9aae2c8baee48551185da5de0cdb62c2","reference_id":"","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/9d5d1a9f9aae2c8baee48551185da5de0cdb62c2"},{"reference_url":"https://huntr.dev/bounties/5069a037-040e-4d77-8526-846e65edfaf4","reference_id":"","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/5069a037-040e-4d77-8526-846e65edfaf4"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4108","reference_id":"CVE-2021-4108","reference_type":"","scores":[{"value":"6.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4108"},{"reference_url":"https://github.com/advisories/GHSA-rxch-gp62-574w","reference_id":"GHSA-rxch-gp62-574w","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rxch-gp62-574w"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18366?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.5"}],"aliases":["CVE-2021-4108","GHSA-rxch-gp62-574w"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q6b1-jhef-8fap"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208986?format=json","vulnerability_id":"VCID-qq58-u49k-ybgk","summary":"Stored cross-site scripting in Snipe-IT","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1445","reference_id":"","reference_type":"","scores":[{"value":"0.0033","scoring_system":"epss","scoring_elements":"0.5634","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1445"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/f623d05d0c3487ae24c4f13907e4709484e5bf41","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/f623d05d0c3487ae24c4f13907e4709484e5bf41"},{"reference_url":"https://huntr.dev/bounties/f4420149-5236-4051-a458-5d4f1d5b7abd","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/f4420149-5236-4051-a458-5d4f1d5b7abd"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1445","reference_id":"CVE-2022-1445","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1445"},{"reference_url":"https://github.com/advisories/GHSA-hpx4-xjp7-m4vr","reference_id":"GHSA-hpx4-xjp7-m4vr","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-hpx4-xjp7-m4vr"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/20145?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.3"}],"aliases":["CVE-2022-1445","GHSA-hpx4-xjp7-m4vr"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qq58-u49k-ybgk"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208151?format=json","vulnerability_id":"VCID-qy5r-zztu-qubx","summary":"Improper Privilege Management in Snipe-IT","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0579","reference_id":"","reference_type":"","scores":[{"value":"0.00303","scoring_system":"epss","scoring_elements":"0.54004","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0579"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1"},{"reference_url":"https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849","reference_id":"","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0579","reference_id":"CVE-2022-0579","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0579"},{"reference_url":"https://github.com/advisories/GHSA-v6vg-pxvv-g5cq","reference_id":"GHSA-v6vg-pxvv-g5cq","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-v6vg-pxvv-g5cq"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19362?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.9"}],"aliases":["CVE-2022-0579","GHSA-v6vg-pxvv-g5cq"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qy5r-zztu-qubx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208227?format=json","vulnerability_id":"VCID-qyeh-yjgg-zfdf","summary":"Generation of Error Message Containing Sensitive Information in Snipe-IT","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0622","reference_id":"","reference_type":"","scores":[{"value":"0.00071","scoring_system":"epss","scoring_elements":"0.21843","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-0622"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2"},{"reference_url":"https://huntr.dev/bounties/4ed99dab-5319-4b6b-919a-84a9acd0061a","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/4ed99dab-5319-4b6b-919a-84a9acd0061a"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0622","reference_id":"CVE-2022-0622","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0622"},{"reference_url":"https://github.com/advisories/GHSA-pwwm-pwx2-2hw7","reference_id":"GHSA-pwwm-pwx2-2hw7","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-pwwm-pwx2-2hw7"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19442?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.11","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.11"},{"url":"http://public2.vulnerablecode.io/api/packages/19952?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.0-RC-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.0-RC-1"}],"aliases":["CVE-2022-0622","GHSA-pwwm-pwx2-2hw7"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-qyeh-yjgg-zfdf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/211391?format=json","vulnerability_id":"VCID-ssbq-f1d6-m7bh","summary":"Snipe-IT vulnerable to Improper Authentication","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3173","reference_id":"","reference_type":"","scores":[{"value":"0.00185","scoring_system":"epss","scoring_elements":"0.40216","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-3173"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/dcab1381e7ee0b7fd1df3a34750dbff4b79185b2"},{"reference_url":"https://huntr.dev/bounties/6d8ffcc6-c6e3-4385-8ead-bdbbbacf79e9","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/6d8ffcc6-c6e3-4385-8ead-bdbbbacf79e9"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3173","reference_id":"CVE-2022-3173","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3173"},{"reference_url":"https://github.com/advisories/GHSA-fhvv-p968-6vvj","reference_id":"GHSA-fhvv-p968-6vvj","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-fhvv-p968-6vvj"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/25867?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.10"}],"aliases":["CVE-2022-3173","GHSA-fhvv-p968-6vvj"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ssbq-f1d6-m7bh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206982?format=json","vulnerability_id":"VCID-sw8p-bapa-sbc8","summary":"snipe-it is vulnerable to Improper Access Control","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4089","reference_id":"","reference_type":"","scores":[{"value":"0.00223","scoring_system":"epss","scoring_elements":"0.45092","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4089"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/1699c09758e56f740437674a8d6ba36443399f24","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/1699c09758e56f740437674a8d6ba36443399f24"},{"reference_url":"https://huntr.dev/bounties/19453ef1-4d77-4cff-b7e8-1bc8f3af0862","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/19453ef1-4d77-4cff-b7e8-1bc8f3af0862"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4089","reference_id":"CVE-2021-4089","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4089"},{"reference_url":"https://github.com/advisories/GHSA-9vwf-54m9-gc4f","reference_id":"GHSA-9vwf-54m9-gc4f","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-9vwf-54m9-gc4f"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18373?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.4"}],"aliases":["CVE-2021-4089","GHSA-9vwf-54m9-gc4f"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sw8p-bapa-sbc8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206763?format=json","vulnerability_id":"VCID-sx4p-2hvz-eue4","summary":"snipe-it is vulnerable to Cross-site Scripting","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4018","reference_id":"","reference_type":"","scores":[{"value":"0.00225","scoring_system":"epss","scoring_elements":"0.45346","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4018"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/ff81e6d5366c2cfb15618793ad919ae4cbb3ac57","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/ff81e6d5366c2cfb15618793ad919ae4cbb3ac57"},{"reference_url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.3","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.3"},{"reference_url":"https://huntr.dev/bounties/c14395f6-bf0d-4b06-b4d1-b509d8a99b54","reference_id":"","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/c14395f6-bf0d-4b06-b4d1-b509d8a99b54"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4018","reference_id":"CVE-2021-4018","reference_type":"","scores":[{"value":"5.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4018"},{"reference_url":"https://github.com/advisories/GHSA-5fh3-25xr-g85h","reference_id":"GHSA-5fh3-25xr-g85h","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5fh3-25xr-g85h"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18176?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mpv-u96h-a7dm"},{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-sw8p-bapa-sbc8"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.3"}],"aliases":["CVE-2021-4018","GHSA-5fh3-25xr-g85h"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-sx4p-2hvz-eue4"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/343300?format=json","vulnerability_id":"VCID-tqkr-xpgd-q7be","summary":"","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3858","reference_id":"","reference_type":"","scores":[{"value":"0.00154","scoring_system":"epss","scoring_elements":"0.35912","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3858"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3"},{"reference_url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.0","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/releases/tag/v5.3.0"},{"reference_url":"https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6b","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6b"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3858","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3858"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/382173?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2mpv-u96h-a7dm"},{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-fa65-f6am-efgj"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-m4sh-qung-vfbq"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-q6b1-jhef-8fap"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-sw8p-bapa-sbc8"},{"vulnerability":"VCID-sx4p-2hvz-eue4"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-w4pf-389e-gudt"},{"vulnerability":"VCID-wcjg-sccj-zugf"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.0"}],"aliases":["CVE-2021-3858","GHSA-g92x-8m54-p89v"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-tqkr-xpgd-q7be"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/208650?format=json","vulnerability_id":"VCID-urgt-uz5n-zyds","summary":"Old sessions not blocked by login enable function in Snipe-IT","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1155","reference_id":"","reference_type":"","scores":[{"value":"0.00254","scoring_system":"epss","scoring_elements":"0.48971","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-1155"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d"},{"reference_url":"https://github.com/snipe/snipe-it/pull/10876","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/pull/10876"},{"reference_url":"https://github.com/snipe/snipe-it/releases/tag/v5.4.2","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/releases/tag/v5.4.2"},{"reference_url":"https://github.com/snipe/snipe-it/releases/tag/v6.0.0-RC-6","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/releases/tag/v6.0.0-RC-6"},{"reference_url":"https://huntr.dev/bounties/ebc26354-2414-4f72-88aa-f044aec2b2e1","reference_id":"","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/ebc26354-2414-4f72-88aa-f044aec2b2e1"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1155","reference_id":"CVE-2022-1155","reference_type":"","scores":[{"value":"7.4","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1155"},{"reference_url":"https://github.com/advisories/GHSA-636j-7x7r-gvw2","reference_id":"GHSA-636j-7x7r-gvw2","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-636j-7x7r-gvw2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/19368?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.10"},{"url":"http://public2.vulnerablecode.io/api/packages/19951?format=json","purl":"pkg:composer/snipe/snipe-it@5.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/19954?format=json","purl":"pkg:composer/snipe/snipe-it@6.0.0-RC-6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@6.0.0-RC-6"}],"aliases":["CVE-2022-1155","GHSA-636j-7x7r-gvw2"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-urgt-uz5n-zyds"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/206583?format=json","vulnerability_id":"VCID-w4pf-389e-gudt","summary":"snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3931","reference_id":"","reference_type":"","scores":[{"value":"0.00128","scoring_system":"epss","scoring_elements":"0.31746","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-3931"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/0d811d067c8e064252c0143c39d6cd4c3133679e","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/0d811d067c8e064252c0143c39d6cd4c3133679e"},{"reference_url":"https://huntr.dev/bounties/03b21d69-3bf5-4b2f-a2cf-872dd677a68f","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/03b21d69-3bf5-4b2f-a2cf-872dd677a68f"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3931","reference_id":"CVE-2021-3931","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3931"},{"reference_url":"https://github.com/advisories/GHSA-533p-cp2g-99wp","reference_id":"GHSA-533p-cp2g-99wp","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-533p-cp2g-99wp"}],"fixed_packages":[],"aliases":["CVE-2021-3931","GHSA-533p-cp2g-99wp"],"risk_score":3.1,"exploitability":"0.5","weighted_severity":"6.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-w4pf-389e-gudt"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/207040?format=json","vulnerability_id":"VCID-wcjg-sccj-zugf","summary":"snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4130","reference_id":"","reference_type":"","scores":[{"value":"0.00158","scoring_system":"epss","scoring_elements":"0.36413","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2021-4130"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it/commit/9b2dd6522f214a3fbee6a4e32699104d0ea2b6ae","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it/commit/9b2dd6522f214a3fbee6a4e32699104d0ea2b6ae"},{"reference_url":"https://huntr.dev/bounties/ccf073cd-7f54-4d51-89f2-6b4a2e4ae81e","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://huntr.dev/bounties/ccf073cd-7f54-4d51-89f2-6b4a2e4ae81e"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4130","reference_id":"CVE-2021-4130","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4130"},{"reference_url":"https://github.com/advisories/GHSA-4w23-c97g-fq5v","reference_id":"GHSA-4w23-c97g-fq5v","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-4w23-c97g-fq5v"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/18417?format=json","purl":"pkg:composer/snipe/snipe-it@5.3.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-6hks-9uk3-23at"},{"vulnerability":"VCID-6zw4-uug8-yfd9"},{"vulnerability":"VCID-7kdb-yy6k-ebd1"},{"vulnerability":"VCID-925h-gz4a-xqf2"},{"vulnerability":"VCID-c3sg-db87-9ff8"},{"vulnerability":"VCID-d9f2-h26a-dyam"},{"vulnerability":"VCID-dvgd-81c2-e3ee"},{"vulnerability":"VCID-f2cp-ca22-gba8"},{"vulnerability":"VCID-hmss-qvuy-rfcx"},{"vulnerability":"VCID-mfeg-t1ta-a3ck"},{"vulnerability":"VCID-nddv-x2uq-vyeu"},{"vulnerability":"VCID-pqxq-5v7x-rydd"},{"vulnerability":"VCID-qq58-u49k-ybgk"},{"vulnerability":"VCID-qy5r-zztu-qubx"},{"vulnerability":"VCID-qyeh-yjgg-zfdf"},{"vulnerability":"VCID-ssbq-f1d6-m7bh"},{"vulnerability":"VCID-urgt-uz5n-zyds"},{"vulnerability":"VCID-yap2-7ggv-jkaw"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.3.6"}],"aliases":["CVE-2021-4130","GHSA-4w23-c97g-fq5v"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-wcjg-sccj-zugf"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/164180?format=json","vulnerability_id":"VCID-yap2-7ggv-jkaw","summary":"Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-44381","reference_id":"","reference_type":"","scores":[{"value":"0.00241","scoring_system":"epss","scoring_elements":"0.47603","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-44381"},{"reference_url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it"},{"reference_url":"https://github.com/snipe/snipe-it","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/snipe/snipe-it"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44381","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-44381"},{"reference_url":"https://github.com/advisories/GHSA-qqv9-gqh5-7h99","reference_id":"GHSA-qqv9-gqh5-7h99","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-qqv9-gqh5-7h99"},{"reference_url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it/","reference_id":"multiple-vulnerabilities-in-snipe-it","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-15T13:20:46Z/"}],"url":"https://census-labs.com/news/2022/12/23/multiple-vulnerabilities-in-snipe-it/"}],"fixed_packages":[],"aliases":["CVE-2022-44381","GHSA-qqv9-gqh5-7h99"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yap2-7ggv-jkaw"}],"fixing_vulnerabilities":[],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/snipe/snipe-it@5.1.3"}