CVE-2025-64027
Cross-site scripting in Snipeitapp Snipe It
CVSS score
6.1
EPSS probability
%0.3
Risk score
0.0
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Reflected Cross-Site Scripting in Snipe-IT CSV Import Workflow (★0)
Makefile Go / Python
GitHub
https://github.com/cybercrewinc/CVE-2025-64027/
Makefile Go / Python
Similar Vulnerabilities
9.9
8.6
CVE-2026-86733Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore
Patch status unknownEPSS %1
8.6
CVE-2026-86770Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
Patch status unknownEPSS %1
8.7
CVE-2025-15602Snipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation
Patch verified Public Exploits:1EPSS %1
8.7
8.7
CVE-2026-85617snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-64027"