Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-5685
7.6
HIGHCVSS v3
Published
June 14, 2024
Affected
3 projects
Assigned by
596c5446-0ce5-4ba2-aa66-48b3b757a647
Severity scale
010
Description
Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1.
grokability/snipe-it
GitHubA free open source IT asset/license management system
GitHubA free open source IT asset/license management system>= 4.6.17, < 6.4.2NVD
snipe/snipe-it
Docker Hub
