Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7kdb-yy6k-ebd1
Vulnerability ID VCID-7kdb-yy6k-ebd1
Aliases CVE-2023-5511
GHSA-33vj-r6p6-x4p8
Summary Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-352 Cross-Site Request Forgery (CSRF)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00113 https://api.first.org/data/v1/epss?cve=CVE-2023-5511
epss 0.00113 https://api.first.org/data/v1/epss?cve=CVE-2023-5511
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-33vj-r6p6-x4p8
cvssv3.1 8.8 https://github.com/snipe/snipe-it
generic_textual HIGH https://github.com/snipe/snipe-it
cvssv3 6.3 https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
cvssv3.1 8.8 https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
generic_textual HIGH https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
ssvc Track https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
cvssv3 6.3 https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
cvssv3.1 8.8 https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
generic_textual HIGH https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
ssvc Track https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2023-5511
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2023-5511
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-5511
https://github.com/snipe/snipe-it
https://nvd.nist.gov/vuln/detail/CVE-2023-5511
43206801-9862-48da-b379-e55e341d78bf https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
6d55d782806c9660e9e65dc5250faacb5d0033ed https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
GHSA-33vj-r6p6-x4p8 https://github.com/advisories/GHSA-33vj-r6p6-x4p8
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/snipe/snipe-it
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:11:33Z/ Found at https://github.com/snipe/snipe-it/commit/6d55d782806c9660e9e65dc5250faacb5d0033ed
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Found at https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-18T15:11:33Z/ Found at https://huntr.dev/bounties/43206801-9862-48da-b379-e55e341d78bf
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2023-5511
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.29478
EPSS Score 0.00113
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:21:47.737923+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2023/5xxx/CVE-2023-5511.json 38.6.0