CVE-2021-3858

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352
• CWE-352

• https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3Patch, Third Party Advisory
• https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6bExploit, Patch, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3Patch, Third Party Advisory
• https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6bExploit, Patch, Third Party Advisory

Published

Oct 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38573An issue was discovered in Foxit Reader and PhantomPDF befor…9.8
• CVE-2021-38574An issue was discovered in Foxit Reader and PhantomPDF befor…9.8
• CVE-2021-38575NetworkPkg/IScsiDxe has remotely exploitable buffer overflow…8.1
• CVE-2021-38576A BIOS bug in firmware for a particular PC model leaves the …7.5
• CVE-2021-38577Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2021-38578Existing CommBuffer checks in SmmEntryPoint will not catch u…9.8
• CVE-2021-38583openBaraza HCM 3.1.6 does not properly neutralize user-contr…6.1
• CVE-2021-38584The WHM Locale Upload feature in cPanel before 98.0.1 allows…7.2
• CVE-2021-38585The WHM Locale Upload feature in cPanel before 98.0.1 allows…7.2
• CVE-2021-38586In cPanel before 98.0.1, /scripts/cpan_config performs unsaf…4.4
• CVE-2021-38587In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles…7.5
• CVE-2021-38588In cPanel before 96.0.13, fix_cpanel_perl lacks verification…8.1