GHSA-fhvv-p968-6vvjMediumCVSS 4.3

Snipe-IT vulnerable to Improper Authentication

Published
September 18, 2022
Last Modified
January 31, 2023

🔗 CVE IDs covered (1)

CVE-2022-3173 →

📋 Description

Snipe-IT prior to 6.0.10 is vulnerable to Improper Authentication. A user without the View and Modify License Files permission may access files uploaded to licenses as long as they have the View permission for licenses.

🎯 Affected products1

  • composer/snipe/snipe-it:< 6.0.10

🔗 References (4)