4 matches found
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control...
4.3CVSS6.8AI score0.00697EPSS
SaveExploits1
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control...
4.3CVSS5.4AI score0.00697EPSS
SaveExploits1References3
CVE-2021-4089
snipe-it is vulnerable to Improper Access Control...
4.3CVSS0.00697EPSS
SaveExploits1References2
CVE-2021-4089
Snipe-IT is affected by an Improper Access Control vulnerability (CVE-2021-4089) affecting versions prior to 5.3.4. The issue arises because regular users with DENY to all models permissions can still view model data via the /models/{id}/clone endpoint due to missing authorize('view') checks. Imp...
4.3CVSS4.4AI score0.00697EPSS
SaveExploits1References2Affected Software1
20