Servers and applications
CVE-2019-10118
Snipe-IT before 4.6.14 has XSS, as demonstrated by log_meta values and the user's last name in the API.
- Severity
- Medium 6.1
- Published
- 27 Mar 2019
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 3 Nov 2026
- Fixed in
- 4.6.14
- Exploit chance
- 0.8% in the next 30 daysHigher than 58% of CVEs. EPSS by FIRST, 10 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Snipe-ITServers and applications · cpe:a:snipeitapp:snipe-it |
|