2 matches found
Snipe-IT's import created_by can be overwritten
Impact The createdby of an import file can be arbitrarily overwritten via the Importer API endpoint by a user with CSV import capabilities who also has a valid API key...
5.7CVSS5.8AI score0.00344EPSS
SaveExploits0References6Affected Software1
GHSA-5WX7-XQ8J-V4QM Snipe-IT's import created_by can be overwritten
Impact The createdby of an import file can be arbitrarily overwritten via the Importer API endpoint by a user with CSV import capabilities who also has a valid API key...
5.7CVSS5.8AI score0.00344EPSS
SaveExploits0References6
20