GHSA-v6vg-pxvv-g5cqMediumCVSS 6.5

Improper Privilege Management in Snipe-IT

Published
February 15, 2022
Last Modified
July 21, 2023

🔗 CVE IDs covered (1)

CVE-2022-0579 →

📋 Description

Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content.

🎯 Affected products1

  • composer/snipe/snipe-it:< 5.3.9

🔗 References (4)