Description
Snipe-IT是Grokability开源的一套开源IT资产/许可证管理系统。 Snipe-IT 8.1.18之前版本存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本攻击。
Snipe-IT 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2022-08729
https://cve.imfht.com/detail/CVE-2022-32060
https://nic.cczu.edu.cn/2022/0628/c1305a295534/page.psp
https://avd.aliyun.com/detail?id=AVD-2025-59712
https://www.sxxdckj.com/cms/a/snipe-it-kua-zhan-jue-ben-lou-dong.html
https://synacktiv.com/advisories/security-vulnerabilities-in-snipe-it
https://advisories.gitlab.com/pkg/composer/snipe/snipe-it/CVE-2025-65621/
https://www.sentinelone.com/vulnerability-database/cve-2025-65622/
https://github.com/advisories/GHSA-fww5-m9wc-jcjc
https://security.snyk.io/package/composer/snipe%2Fsnipe-it