CVE-2022-1155: Business Logic Error

March 30, 2022 (updated April 5, 2022)

Old sessions are not blocked by the login enable function in GitHub repository snipe/snipe-it prior to 5.3.10.

References

github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d
huntr.dev/bounties/ebc26354-2414-4f72-88aa-f044aec2b2e1
nvd.nist.gov/vuln/detail/CVE-2022-1155

Code Behaviors & Features

Detect and mitigate CVE-2022-1155 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →