1531 matches found
Snipe-IT 访问控制错误漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, which stems from the presence of improper access controls in the software. No details of the vulnerability are currently available...
PT-2022-13014
Name of the Vulnerable Software and Affected Versions snipe-it versions prior to 5.3.8 Description The issue affects snipe-it due to a Missing Authorization vulnerability, which is also described as an Improper Access Control vulnerability. This allows users with no system permissions to see and...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
Authorization
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179 Missing Authorization in snipe/snipe-it
snipe-it is vulnerable to Missing Authorization...
Unspecified vulnerability in snipe-it (CNVD-2022-10714)
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
Snipe-IT 安全漏洞
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...
CVE-2022-0179: Missing Authorization
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
CVE-2022-0179 – snipe-it : A Missing Authorization flaw (faulty access control) in snipe-it, an open-source IT asset/license management system. The vulnerability is described with partial confidentiality/integrity impact (C:L/I:L) and no availability impact in the NVD metrics, and is classified u...
PT-2022-2858
Name of the Vulnerable Software and Affected Versions Snipe-IT versions v3.0-alpha through v5.3.7 Description The issue is related to Host Header Injection in the password reset function of Snipe-IT. By sending a specially crafted host header in the reset password request, it is possible to send...
Improper Access Control in snipe/snipe-it
Description A user with no rights for API tokens can view the page where API tokens can be generated and can generate API tokens. Proof of Concept - Create a user with no permission for anything i.e. everything on deny. - Log in with this user to the web application. - Visit...
Improper Access Control in snipe/snipe-it
Description All bulk actions bulk-edit / bulk-delete / form info in asset models do not have access control checks Proof of concept 1: Grant view to Asset Models 2: UI for bulk-edit and bulk-delete is still enabled, proceed. 3: You may bulk-delete / edit any asset model Impact This vulnerability ...
GHSA-4W23-C97G-FQ5V snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it cross-site request forgery vulnerability (CNVD-2022-08728)
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, no details of the vulnerability are provided...
Cross-Site Request Forgery (CSRF)
snipe/snipe-it is vulnerable to cross-site request forgery. The vulnerability exists in the getRequestAsset in the ViewAssetsController.php, allowing an attacker to disrupt request tracking by sending the malicious HTML...