4 matches found
GHSA-WG2F-X2C2-C4RP Snipe-IT has an Open Redirect After User Edit
Impact The user edit flow stores url-previous into Laravel's intended URL session value and later redirects with redirect-intended... when redirectoption=back is submitted. Because the previous URL is derived from the attacker-controlled Referer header, an authenticated user performing a normal...
6.1CVSS5.9AI score0.0031EPSS
SaveExploits0References5
20