Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33290
HistoryDec 13, 2021 - 5:24 a.m.

Insecure Access Control

2021-12-1305:24:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
snipe-it
vulnerability
access control
permissions
model info

EPSS

0.001

Percentile

21.4%

snipe/snipe-it is vulnerable to improper access control. The vulnerability exists because it does not perform sufficient user permissions, allowing users to view model information via clone endpoint.

EPSS

0.001

Percentile

21.4%