Packagist/snipe/snipe-it CVE-2021-4075: high 7.2, EPSS 0.92%
Server-Side Request Forgery in snipe/snipe-it
Action: Upgrade snipe/snipe-it to 6.0.0-GM or later.
composer require snipe/snipe-it:6.0.0-GMAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0-GM | - |
Fixed versions
| 6.0.0-GM |
Sources
- osv: GHSA-553q-hpvp-q8pc
- https://nvd.nist.gov/vuln/detail/CVE-2021-4075
- https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e
- https://github.com/snipe/snipe-it
- https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de
CVE-2021-4075 · published · modified · JSON