CVE-2026-116199

Mô tả

Tham khảo

• grokability/snipe-it security advisory · Vendor Advisory
• vulncheck.com/advisories/snipe-it-before-8.6.3-authentication-bypass-via-google-sso-callback · Third Party Advisory

Lỗ hổng khác của snipe-it

• CVE-2026-116201CAO 8.8Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-…
• CVE-2026-116200TRUNG BÌNH 5.9Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force cleartext LDAP…
• CVE-2026-116198TRUNG BÌNH 4.3Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagge…
• CVE-2026-63498TRUNG BÌNH 5.4Snipe-IT is an IT asset/license management system. Prior to 8.7.0, the uploaded-files API endpoint GET /api/v1/{object_type}/{id}/files/{fil…
• CVE-2026-63493CAO 8.1Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission …