Headline
GHSA-fhvv-p968-6vvj: Snipe-IT vulnerable to Improper Authentication
Snipe-IT prior to 6.0.10 is vulnerable to Improper Authentication. A user without the View and Modify License Files
permission may access files uploaded to licenses as long as they have the View
permission for licenses.
Snipe-IT vulnerable to Improper Authentication
Moderate severity GitHub Reviewed Published Sep 18, 2022 • Updated Sep 20, 2022
Related news
CVE-2022-3173
Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.