Incorrect Authorization

Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Incorrect Authorization via the assetmodel endpoint. An attacker can bypass administrative restrictions and create unauthorized checkout requests for asset models that are n...