| Package | Affected versions | Patched versions |
|---|---|---|
| snipe-it | < 8.7.0 | 8.7.0 |
snipe-it versions before 8.7.0 contain an authorization bypass vulnerability in location print endpoints that fails to enforce per-model authorization checks. Authenticated attackers with location view permission can access printassigned and printallassigned endpoints to retrieve related users, assets, accessories, consumables, and components regardless of their individual model permissions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free