high8.8
CVE-2022-0611
Improper Privilege Management in Snipe-IT
Impact
An unprivileged user of Snipe-IT prior to version 5.3.11 can create maintenance for an asset. Version 5.3.11 contains a patch for this issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | < 5.3.11 | 5.3.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 5.3.11 |