CVE-2022-0579: Improper Privilege Management

February 14, 2022 (updated August 2, 2023)

Improper Privilege Management in Packagist snipe/snipe-it prior to 5.3.9.

References

github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1
huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849
nvd.nist.gov/vuln/detail/CVE-2022-0579

Code Behaviors & Features

Detect and mitigate CVE-2022-0579 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →