Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the PATCH /api/v1/hardware/id process. An attacker can reassign assets, bypass check-in procedures, and alter custody records by submitting the...