869 matches found
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
Authorization
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
CVE-2022-0179 – snipe-it : A Missing Authorization flaw (faulty access control) in snipe-it, an open-source IT asset/license management system. The vulnerability is described with partial confidentiality/integrity impact (C:L/I:L) and no availability impact in the NVD metrics, and is classified u...
Snipe-IT 安全漏洞
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...
CVE-2022-0179 Missing Authorization in snipe/snipe-it
snipe-it is vulnerable to Missing Authorization...
Unspecified vulnerability in snipe-it (CNVD-2022-10714)
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...
Improper Access Control in snipe/snipe-it
Description A user with no rights for API tokens can view the page where API tokens can be generated and can generate API tokens. Proof of Concept - Create a user with no permission for anything i.e. everything on deny. - Log in with this user to the web application. - Visit...
Improper Access Control in snipe/snipe-it
Description All bulk actions bulk-edit / bulk-delete / form info in asset models do not have access control checks Proof of concept 1: Grant view to Asset Models 2: UI for bulk-edit and bulk-delete is still enabled, proceed. 3: You may bulk-delete / edit any asset model Impact This vulnerability ...
GHSA-4W23-C97G-FQ5V snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
snipe-it cross-site request forgery vulnerability (CNVD-2022-08728)
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to cross-site request forgery, no details of the vulnerability are provided...
Cross-Site Request Forgery (CSRF)
snipe/snipe-it is vulnerable to cross-site request forgery. The vulnerability exists in the getRequestAsset in the ViewAssetsController.php, allowing an attacker to disrupt request tracking by sending the malicious HTML...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4130
CVE-2021-4130 describes a Cross-Site Request Forgery (CSRF) vulnerability in the open-source asset management app snipe-it . The connected records confirm the issue across multiple sources but do not provide concrete details on affected versions or affected components beyond the CSRF label. CVSS ...