Authorization Bypass Through User-Controlled Key

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the printassigned and printallassigned endpoints due to missing per-model authorization checks. An attacker can retrieve...