medium6.5
CVE-2022-1511
Improper Access Control in snipe/snipe-it
Impact
Snipe-IT prior to 5.4.4 is vulnerable to Missing Authorization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | < 5.4.4 | 5.4.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 5.4.4 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/snipe/snipe-it/commit/2e9cf8fa87a025c0eac9f79f4864b3fdd33a950c
- https://huntr.dev/bounties/4a1723e9-5bc4-4c4b-bceb-1c45964cc71d
- https://github.com/advisories/GHSA-p2vw-f87c-q597
- https://nvd.nist.gov/vuln/detail/CVE-2022-1511
- https://github.com/snipe/snipe-it/pull/10991