Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the profile route that allows unauthorized access to confidential files. An attacker can obtain and download sensiti...