PT-2022-13266 · Snipe-It · Snipe-It

Published 2022-02-12 · Updated 2023-08-02 · CVE-2022-0569

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions snipe/snipe-it versions prior to 5.3.9 snipe/snipe-it versions prior to 5.3.10

Description The issue concerns exposure of sensitive information to an unauthorized actor.

Recommendations For versions prior to 5.3.9, update to version 5.3.9 or later. For versions prior to 5.3.10, update to version 5.3.10 or later.

Exploit

Fix

Information Disclosure

Side Channel Attack

Weakness Enumeration

CWE-200

CWE-203

Related Identifiers

CVE-2022-0569

GHSA-QPV2-JXC7-3638

Affected Products

Snipe-It

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0569.json · Exploit
• 🔥 https://huntr.dev/bounties/b41d5e63-bcd8-4864-8a2e-8ec74eec520b · Exploit
• https://github.com/snipe/snipe-it/commit/05c0819776b07425b2831cd31a8a0f4e7ac30c09 · Patch
• https://osv.dev/vulnerability/GHSA-qpv2-jxc7-3638 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0569 · Security Note
• https://github.com/snipe/snipe-it · Note
• https://t.me/cibsecurity/37417 · Telegram Post
• https://t.me/cvenotify/27176 · Telegram Post