Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-4089

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9vwf-54m9-gc4f

snipe-it is vulnerable to Improper Access Control snipe-it prior to version 5.3.4 is vulnerable to Improper Access Control. Regular users with `DENY` set to all models permissions can still view model information via the /models/{id}/clone endpoint due to no authorize('view') permission being set.

gitlab/packagist/snipe/snipe-it/CVE-2021-4089

Incorrect Authorization snipe-it is vulnerable to Improper Access Control