GHSA-xc47-3rch-cv57

GitHub Security Advisory

Improper Access Control in snipe-it

✓ GitHub Reviewed MODERATE Has CVE

Users with no system permissions are able to see and create personal access tokens

Packagist snipe/snipe-it

Affected versions: 0 (fixed in 5.3.8)

CVE-2022-0178

GHSA ID

GHSA-xc47-3rch-cv57

Published

January 26, 2022 8:24 PM

Last Modified

January 26, 2022 8:23 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

snipe/snipe-it

GitHub Reviewed

✓ Yes

Last updated: September 15, 2025 6:32 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.