Open Redirect

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Open Redirect via the acs process. An attacker can redirect users to arbitrary external URLs by crafting a malicious SAML SSO link and inducing a user to authenticate. This...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the process that handles encrypted custom-field values in asset form templates for listbox, textarea, markdown-textarea, and date/datetime picker...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via improper access control in the OAuth client management process. An attacker can gain unauthorized administrative API access by registering OAuth...

Unchecked Return Value

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Unchecked Return Value in the handleImages process. An attacker can cause unrecoverable loss of existing images and create a persistent inconsistency between the database an...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the asset audit endpoints process. An attacker can gain unauthorized access to audit log functionality across different company assets by bypassin...

Information Exposure

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Information Exposure via the CSV export and API index endpoints due to improper enforcement of authorization checks. An attacker can access sensitive license key information...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the printassigned and printallassigned endpoints due to missing per-model authorization checks. An attacker can retrieve...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the store and update functions of the API user controller, where user records are saved before verifying that the submitted company identifiers ar...

Information Exposure

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Information Exposure in the GET /hardware/requested endpoint when Full Multiple Company Support is enabled. An attacker can access sensitive information belonging to other...

Improper Input Validation

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Input Validation via the API checkout process. An attacker can corrupt asset records and audit trails by submitting POST requests with soft-deleted user, asset, or...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization via the api middleware group in the authentication process. An attacker can maintain unauthorized access to the REST API with previously issued persona...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the PATCH /api/v1/hardware/id process. An attacker can reassign assets, bypass check-in procedures, and alter custody records by submitting the...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the POST /hardware/history process. An attacker can reassign assets and modify audit logs by submitting a crafted CSV file, potentially compromising...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization in the update process of the UsersController due to assigning the activated field from the request payload before evaluating the authorization gate. ...

Missing Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Missing Authorization in the GET /api/v1/hardware//assigned/components endpoint, which does not properly enforce the required permission check. An attacker can access...

Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the App\Livewire\Importer component, specifically at the imports.index route. An attacker can access sensitive import...

Improper Ownership Management

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Ownership Management in the consumables checkout process. An attacker can cause audit log entries to be misattributed by performing checkouts with the appropriate...

Cross-site Scripting (XSS)

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the DepartmentPresenter::formattedNameLink process when department names are rendered without proper escaping in the fallback branch for users...

Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via the updateLicense, updateConsumable, updateAccessory, updateModel, and storeModel endpoints when object-level authorization is not enforced for...

Improper Handling of Case Sensitivity

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity through improper handling of username collation during federated authentication processes. An attacker can gain unauthorized access to...