Improper Authorization

Snipe-IT is vulnerable to Improper Authorization. The vulnerability is due to improper handling of missing permission fields during user updates, where existing permissions can be unintentionally overwritten with a sparse permission set, allowing authorized users to remove administrative or...