CNNVD-202509-3054 Information
Sep 19, 2025
cve
CNNVD ID
CNNVD-202509-3054
Related CVE
- CNNVD Published: 2025-09-19
Description (Chinese)
Snipe-IT是Grokability开源的一套开源IT资产/许可证管理系统。 Snipe-IT 8.1.18之前版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本攻击。
Description (English)
Snipe-IT is an open-source IT asset/licence management system for the open source of Grokability. The pre-Snipe-IT 8.1.18 version had a cross-site script loophole, which stemmed from the vulnerability to cross-site script attacks.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
Grouptime
Published
2025-09-19
Last Modified
2026-02-24
References
https://github.com/grokability/snipe-it/releases/tag/v8.1.18 https://access.redhat.com/security/cve/cve-2025-59712
Patch
https://github.com/grokability/snipe-it/releases
Share on: