CSV Injection

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to CSV Injection in the ReportsController::postAssetAcceptanceReport process. An attacker can inject malicious formula content into free-text fields that appear in the acceptan...

Race Condition

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Race Condition through the checkout process. An attacker can cause inconsistent asset assignment records and corrupt audit trails by sending concurrent checkout requests for...

Improper Privilege Management

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Privilege Management via the Livewire component lifecycle methods. An attacker can gain unauthorized access to sensitive administrative functions and escalate...

Unchecked Return Value

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Unchecked Return Value in the store process. An attacker can cause acceptance records to be finalized without supporting evidence files by completing an acceptance while the...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via the oauth/personal-access-tokens routes, which are exposed with insufficient middleware protections. An attacker can obtain a long-lived bearer...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper return value checking in the destroy process. An attacker can cause files to remain...

External Control of File Name or Path

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to External Control of File Name or Path via improper sanitization of markdown image syntax in note fields. An attacker can access sensitive server files and perform unauthoriz...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via the assetmodel endpoint. An attacker can bypass administrative restrictions and create unauthorized checkout requests for asset models that are n...

Open Redirect

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Open Redirect via the acs process. An attacker can redirect users to arbitrary external URLs by crafting a malicious SAML SSO link and inducing a user to authenticate. This...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the process that handles encrypted custom-field values in asset form templates for listbox, textarea, markdown-textarea, and date/datetime picker...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via improper access control in the OAuth client management process. An attacker can gain unauthorized administrative API access by registering OAuth...

Unchecked Return Value

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Unchecked Return Value in the handleImages process. An attacker can cause unrecoverable loss of existing images and create a persistent inconsistency between the database an...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the asset audit endpoints process. An attacker can gain unauthorized access to audit log functionality across different company assets by bypassin...

Information Exposure

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Information Exposure via the CSV export and API index endpoints due to improper enforcement of authorization checks. An attacker can access sensitive license key information...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the store and update functions of the API user controller, where user records are saved before verifying that the submitted company identifiers ar...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the printassigned and printallassigned endpoints due to missing per-model authorization checks. An attacker can retrieve...

Information Exposure

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Information Exposure in the GET /hardware/requested endpoint when Full Multiple Company Support is enabled. An attacker can access sensitive information belonging to other...

Improper Input Validation

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Input Validation via the API checkout process. An attacker can corrupt asset records and audit trails by submitting POST requests with soft-deleted user, asset, or...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization via the api middleware group in the authentication process. An attacker can maintain unauthorized access to the REST API with previously issued persona...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the PATCH /api/v1/hardware/id process. An attacker can reassign assets, bypass check-in procedures, and alter custody records by submitting the...