Lucene search

K
osvGoogleOSV:GHSA-V6VG-PXVV-G5CQ
HistoryFeb 15, 2022 - 12:02 a.m.

Improper Privilege Management in Snipe-IT

2022-02-1500:02:45
Google
osv.dev
6
snipe-it
privilege management
unauthorized access
supplier module

EPSS

0.001

Percentile

30.4%

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content.

EPSS

0.001

Percentile

30.4%