{"action":"Upgrade snipe/snipe-it to 7.0.10 or later.","affected":[{"fixed":"7.0.10","introduced":"0"}],"component":"snipe/snipe-it","cve_ids":["CVE-2024-48987"],"ecosystem":"Packagist","epss":0.0099,"exploited":false,"fixed_versions":["7.0.10"],"ghsa_id":"GHSA-57qh-vmjr-5jxg","id":"tcs_01M5KEVQRBFAKKT3J3QYSD5XJJ","modified_at":"2025-03-25T20:14:16.370299Z","published_at":"2024-10-11T15:30:32Z","references":["https://osv.dev/vulnerability/GHSA-57qh-vmjr-5jxg","https://nvd.nist.gov/vuln/detail/CVE-2024-48987","https://github.com/snipe/snipe-it","https://github.com/snipe/snipe-it/releases/tag/v7.0.10","https://snipe-it.readme.io/docs/key-rotation","https://www.synacktiv.com/advisories/snipe-it-unauthenticated-remote-command-execution-when-appkey-known"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-57qh-vmjr-5jxg","url":"https://osv.dev/vulnerability/GHSA-57qh-vmjr-5jxg"}],"summary":"Snipe-IT remote code execution"}