GitHub Advisoryadvisory · Packagist
GHSA-c9wp-pr7f-hfqm Snipe-IT allows XSS
MEDIUM
Official page ↗
- Aliases
- CVE-2025-59712
- Ecosystem
- Packagist
- Packages
- snipe/snipe-it
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2025-09-19
Affected packages
• Packagist snipe/snipe-it: < 8.1.18 → fixed in 8.1.18
Description
Snipe-IT before 8.1.18 allows XSS.
Related
Alias · CVE (1)
- CVE-2025-59712 Snipe-IT before 8.1.18 allows XSS. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness