1 matches found
GHSA-6F75-X745-XCPR Snipe-IT: Bulk editing users allowed `ldap_import` and `activated_in` bulk editing users
Impact The vulnerability allows a non-admin user holding only the granular users.edit permission to lock every admin out of the instance by editing the activated flag which determines whether or not a user can login and the ldapimport flag, which determines whether or not the user can request a...
7.1CVSS5.9AI score0.00194EPSS
SaveExploits0References4
20