CVE-2021-3931

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352

• https://github.com/snipe/snipe-it/commit/0d811d067c8e064252c0143c39d6cd4c3133679ePatch, Third Party Advisory
• https://huntr.dev/bounties/03b21d69-3bf5-4b2f-a2cf-872dd677a68fExploit, Patch, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/0d811d067c8e064252c0143c39d6cd4c3133679ePatch, Third Party Advisory
• https://huntr.dev/bounties/03b21d69-3bf5-4b2f-a2cf-872dd677a68fExploit, Patch, Third Party Advisory

Published

Nov 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39303The server in Jamf Pro before 10.32.0 has an SSRF vulnerabil…9.8
• CVE-2021-39304Proofpoint Enterprise Protection before 8.12.0-2108090000 al…7.5
• CVE-2021-39306A stack buffer overflow was discovered on Realtek RTL8195AM …9.8
• CVE-2021-39307PDFTron's WebViewer UI 8.0 or below renders dangerous URLs a…6.1
• CVE-2021-39308The WooCommerce myghpay Payment Gateway WordPess plugin is v…6.1
• CVE-2021-39309The Parsian Bank Gateway for Woocommerce WordPress plugin is…6.1
• CVE-2021-39310The Real WYSIWYG WordPress plugin is vulnerable to Reflected…6.1
• CVE-2021-39311The link-list-manager WordPress plugin is vulnerable to Refl…6.1
• CVE-2021-39312The True Ranker plugin <= 2.2.2 for WordPress allows arbitra…7.5
• CVE-2021-39313The Simple Image Gallery WordPress plugin is vulnerable to R…6.1
• CVE-2021-39314The WooCommerce EnvioPack WordPress plugin is vulnerable to …6.1
• CVE-2021-39315The Magic Post Voice WordPress plugin is vulnerable to Refle…6.1