Skip to content

snipe-it is vulnerable to Improper Access Control

Moderate severity GitHub Reviewed Published Dec 16, 2021 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

composer snipe/snipe-it (Composer)

Affected versions

< 5.3.4

Patched versions

5.3.4

Description

snipe-it prior to version 5.3.4 is vulnerable to Improper Access Control. Regular users with DENY set to all models permissions can still view model information via the /models/{id}/clone endpoint due to no authorize('view') permission being set.

References

Published by the National Vulnerability Database Dec 10, 2021
Reviewed Dec 15, 2021
Published to the GitHub Advisory Database Dec 16, 2021
Last updated Jan 30, 2023

Severity

Moderate
4.3
/ 10

CVSS base metrics

Attack vector
Network
Attack complexity
Low
Privileges required
Low
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CVE ID

CVE-2021-4089

GHSA ID

GHSA-9vwf-54m9-gc4f

Source code

Checking history
See something to contribute? Suggest improvements for this vulnerability.