Snipe vulnerabilities
We track 1 vulnerability in Snipe products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 14, 2024.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Snipe vulnerabilities
- 8.1 High severity
snipe-it: Missing Authorization
Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1.