CVE-2021-4075: Server-Side Request Forgery (SSRF)

December 6, 2021 (updated December 7, 2021)

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

References

github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e
huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de
nvd.nist.gov/vuln/detail/CVE-2021-4075

Code Behaviors & Features

Detect and mitigate CVE-2021-4075 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →