CVE-2022-1445

Name of the Vulnerable Software and Affected Versions snipe-it versions prior to 5.4.3

Description The issue is related to a Stored Cross Site Scripting vulnerability in the checked out to parameter. This vulnerability can lead to the theft of a user's cookie. The input to the checked out to parameter is not properly escaped, allowing for the execution of malicious scripts.

Recommendations For versions prior to 5.4.3, update to version 5.4.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the checked out to parameter to minimize the risk of exploitation. Avoid using the checked out to parameter in sensitive operations until the issue is resolved.