Access Control Bypass

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Access Control Bypass in the files method of AssetModelPolicy. An attacker can upload and delete file attachments on Asset Model records without proper authorization by...