CNNVD-202512-035 Information
Dec 01, 2025
cve
CNNVD ID
CNNVD-202512-035
Related CVE
- CNNVD Published: 2025-12-01
Description (Chinese)
Snipe-IT是Grokability开源的一套开源IT资产/许可证管理系统。 Snipe-IT 8.3.4之前版本存在安全漏洞，该漏洞源于存储型跨站脚本攻击，可能导致权限提升。
Description (English)
Snipe-IT is an open-source IT asset/licence management system for the open source of Grokability. The previous version of Snipe-IT 8.3.4 had a security loophole, which originated in a storage-type cross-site script attack, which could lead to increased access.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Grokability
Published
2025-12-01
Last Modified
2026-02-24
References
http://snipeitapp.com https://github.com/firef0x00/vulnerability-research/tree/main/CVE-2025-65621 https://access.redhat.com/security/cve/cve-2025-65621