{"action":"Upgrade snipe/snipe-it to 6.4.2 or later.","affected":[{"fixed":"6.4.2","introduced":"0"}],"component":"snipe/snipe-it","cve_ids":["CVE-2024-5685"],"ecosystem":"Packagist","epss":0.00407,"exploited":false,"fixed_versions":["6.4.2"],"ghsa_id":"GHSA-544r-fc65-v832","id":"tcs_01M5KEVJFWATSE8R36KTTK06BW","modified_at":"2024-06-25T02:40:11.159580Z","published_at":"2024-06-14T12:30:50Z","references":["https://osv.dev/vulnerability/GHSA-544r-fc65-v832","https://nvd.nist.gov/vuln/detail/CVE-2024-5685","https://github.com/snipe/snipe-it/pull/14745","https://github.com/snipe/snipe-it/commit/34f1ea1c0ecd403047cd1327569ee391a7201cc1","https://advisory.checkmarx.net/?search=CVE-2024-5685","https://devhub.checkmarx.com/cve-details/CVE-2024-5685","https://github.com/snipe/snipe-it","https://github.com/snipe/snipe-it/releases/tag/v6.4.2"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-544r-fc65-v832","url":"https://osv.dev/vulnerability/GHSA-544r-fc65-v832"}],"summary":"Snipe-IT allows users to promote or demote themselves or other users"}