CVE-2021-4108: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

December 14, 2021 (updated December 21, 2021)

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)

References

github.com/snipe/snipe-it/commit/9d5d1a9f9aae2c8baee48551185da5de0cdb62c2
huntr.dev/bounties/5069a037-040e-4d77-8526-846e65edfaf4
nvd.nist.gov/vuln/detail/CVE-2021-4108

Code Behaviors & Features

Detect and mitigate CVE-2021-4108 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →