Known vulnerabilities in snipe-it 6.0.0 - page 3

Vendor: snipe
Software: snipe-it
Version: 6.0.0
Software CPE: cpe:2.3:a:snipe:snipe-it:*:*:*:*:*:*:*:*
Total vulnerabilities: 45
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting snipe-it version 6.0.0 snipe-it 6.0.0 is affected by 45 vulnerabilities: 2 high, 8 medium, 35 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83510 - Resource exhaustion
CVE-2023-49316
CWE-400 Medium
No
No
6.3.0 27.11.2023 SB2023112762
SB2024013025
#VU81296 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-43655
CWE-94 High
No
No
6.3.0 29.09.2023 SB2023092947
SB2023092956
SB2023092957
and 13 more
#VU81101 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3726
CWE-79 Low
No
No
6.2.0 25.09.2023 SB2023092533
SB2023092615
#VU70523 - Exposure of sensitive information to an unauthorized actor
CVE-2022-44381
CWE-200 Low
No
No
6.0.14 28.12.2022 SB2022122812
#VU70522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-44380
CWE-79 Low
No
No
6.0.14 28.12.2022 SB2022122811


Showing elements 41 - 60 out of 45