Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34280
HistoryFeb 18, 2022 - 9:08 a.m.

Information Exposure

2022-02-1809:08:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
snipe-it
software vulnerability
information exposure

EPSS

0.001

Percentile

35.0%

snipe/snipe-it is vulnerable to information exposure. The vulnerability exists in the sendResetLinkEmail function in the ForgotPasswordController.php file, allowing an attacker to read sensitive information in the system.

EPSS

0.001

Percentile

35.0%