PkgSeer

Vulnerability GHSA-9vh6-qfv6-vcqp

High Risk

4 years ago

snipe-IT vulnerable to host header injection

3.0-alpha - 5.3.7

Summary

snipe-IT vulnerable to host header injection

Details

Snipe-IT is a free, open-source IT asset/license management systemIn Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This can lead to account take over.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

0.1.0 - 1.2.6 and 1.2.6.1 - 8.6.3 GHSA-396x-xmvh-p563

Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

0.1.0 - 1.2.6 and 1.2.6.1 - 8.6.3 GHSA-p9h3-gvpq-5539

Snipe-IT: 2FA bypass via the API token flow

0.1.0 - 1.2.6 and 1.2.6.1 - 8.6.3 GHSA-hxcx-9h4f-42xx

Snipe-IT has an Improper Privilege Management issue

0.1.0 - 1.2.6 and 1.2.6.1 - 8.5.0 GHSA-j5g3-42wp-gqm3

Snipe-IT vulnerable to cross-company asset maintenance re-parenting via API update

0.1.0 - 1.2.6 and 1.2.6.1 - 8.6.1 GHSA-575r-357h-fhch

View all vulnerabilities for these packages

Impacted packages

snipe/snipe-it

Timeline

Published

4 years ago

Fixed (5.3.8)

4 years ago

Last Modified

4 days ago