CVE-2021-3858: Cross-Site Request Forgery (CSRF) in snipe/snipe-it
Published Oct 19, 2021
·Updated
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Affected Software
1 affected component
Snipeitapp Snipe-it<5.3.0
Remediation
Event History
Oct 19, 2021
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-3858?
CVE-2021-3858 is a vulnerability in snipe-it which makes it vulnerable to Cross-Site Request Forgery (CSRF).
2
What is the severity of CVE-2021-3858?
The severity of CVE-2021-3858 is high with a CVSS score of 8.8.
3
How does CVE-2021-3858 affect snipe-it?
CVE-2021-3858 affects snipe-it by making it vulnerable to Cross-Site Request Forgery (CSRF) attacks.
4
What version of snipe-it is affected by CVE-2021-3858?
snipe-it versions up to 5.3.0 are affected by CVE-2021-3858.
5
How can I fix the vulnerability in snipe-it?
To fix the vulnerability in snipe-it, you should update to a version higher than 5.3.0.