Количество 3
Количество 3
CVE-2026-55476
Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?} accepts cancel_by_admin as a URL path segment without sufficient authorization, allowing an authenticated user to supply a victim user ID and silently cancel that user’s pending asset requests. This issue is fixed in version 8.6.0.
CVE-2026-55476
Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POS ...
GHSA-53jc-27pc-x8r8
Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-55476 Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?} accepts cancel_by_admin as a URL path segment without sufficient authorization, allowing an authenticated user to supply a victim user ID and silently cancel that user’s pending asset requests. This issue is fixed in version 8.6.0. | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-55476 Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POS ... | CVSS3: 4.3 | 0% Низкий | 3 месяца назад |
| GHSA-53jc-27pc-x8r8 Snipe-IT Vulnerable to Unauthorized Asset Request Cancellation via Unguarded cancel_by_admin Parameter | 0% Низкий | 26 дней назад |
Уязвимостей на страницу