CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23064

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 59.7%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2022-23064

Snipeitapp » Snipe-It » Version: 3.0.0

cpe:2.3:a:snipeitapp:snipe-it:3.0.0
Snipeitapp » Snipe-It » Version: 3.1.0

cpe:2.3:a:snipeitapp:snipe-it:3.1.0
Snipeitapp » Snipe-It » Version: 3.2.0

cpe:2.3:a:snipeitapp:snipe-it:3.2.0
Snipeitapp » Snipe-It » Version: 3.3.0

cpe:2.3:a:snipeitapp:snipe-it:3.3.0
Snipeitapp » Snipe-It » Version: 3.4.0

cpe:2.3:a:snipeitapp:snipe-it:3.4.0
Snipeitapp » Snipe-It » Version: 3.5.0

cpe:2.3:a:snipeitapp:snipe-it:3.5.0
Snipeitapp » Snipe-It » Version: 3.5.1

cpe:2.3:a:snipeitapp:snipe-it:3.5.1
Snipeitapp » Snipe-It » Version: 3.6.0

cpe:2.3:a:snipeitapp:snipe-it:3.6.0
Snipeitapp » Snipe-It » Version: 3.6.1

cpe:2.3:a:snipeitapp:snipe-it:3.6.1
Snipeitapp » Snipe-It » Version: 3.6.2

cpe:2.3:a:snipeitapp:snipe-it:3.6.2
Snipeitapp » Snipe-It » Version: 3.6.3

cpe:2.3:a:snipeitapp:snipe-it:3.6.3
Snipeitapp » Snipe-It » Version: 3.6.4

cpe:2.3:a:snipeitapp:snipe-it:3.6.4
Snipeitapp » Snipe-It » Version: 3.6.5

cpe:2.3:a:snipeitapp:snipe-it:3.6.5
Snipeitapp » Snipe-It » Version: 3.6.6

cpe:2.3:a:snipeitapp:snipe-it:3.6.6
Snipeitapp » Snipe-It » Version: 4.0.0

cpe:2.3:a:snipeitapp:snipe-it:4.0.0
Snipeitapp » Snipe-It » Version: 4.0.1

cpe:2.3:a:snipeitapp:snipe-it:4.0.1
Snipeitapp » Snipe-It » Version: 4.0.10

cpe:2.3:a:snipeitapp:snipe-it:4.0.10
Snipeitapp » Snipe-It » Version: 4.0.11

cpe:2.3:a:snipeitapp:snipe-it:4.0.11
Snipeitapp » Snipe-It » Version: 4.0.12

cpe:2.3:a:snipeitapp:snipe-it:4.0.12
Snipeitapp » Snipe-It » Version: 4.0.13

cpe:2.3:a:snipeitapp:snipe-it:4.0.13
Snipeitapp » Snipe-It » Version: 4.0.14

cpe:2.3:a:snipeitapp:snipe-it:4.0.14
Snipeitapp » Snipe-It » Version: 4.0.15

cpe:2.3:a:snipeitapp:snipe-it:4.0.15
Snipeitapp » Snipe-It » Version: 4.0.2

cpe:2.3:a:snipeitapp:snipe-it:4.0.2
Snipeitapp » Snipe-It » Version: 4.0.3

cpe:2.3:a:snipeitapp:snipe-it:4.0.3
Snipeitapp » Snipe-It » Version: 4.0.4

cpe:2.3:a:snipeitapp:snipe-it:4.0.4
Snipeitapp » Snipe-It » Version: 4.0.5

cpe:2.3:a:snipeitapp:snipe-it:4.0.5
Snipeitapp » Snipe-It » Version: 4.0.6

cpe:2.3:a:snipeitapp:snipe-it:4.0.6
Snipeitapp » Snipe-It » Version: 4.0.7

cpe:2.3:a:snipeitapp:snipe-it:4.0.7
Snipeitapp » Snipe-It » Version: 4.0.8

cpe:2.3:a:snipeitapp:snipe-it:4.0.8
Snipeitapp » Snipe-It » Version: 4.0.9

cpe:2.3:a:snipeitapp:snipe-it:4.0.9
Snipeitapp » Snipe-It » Version: 4.1.0

cpe:2.3:a:snipeitapp:snipe-it:4.1.0
Snipeitapp » Snipe-It » Version: 4.1.1

cpe:2.3:a:snipeitapp:snipe-it:4.1.1
Snipeitapp » Snipe-It » Version: 4.1.10

cpe:2.3:a:snipeitapp:snipe-it:4.1.10
Snipeitapp » Snipe-It » Version: 4.1.11

cpe:2.3:a:snipeitapp:snipe-it:4.1.11
Snipeitapp » Snipe-It » Version: 4.1.12

cpe:2.3:a:snipeitapp:snipe-it:4.1.12
Snipeitapp » Snipe-It » Version: 4.1.13

cpe:2.3:a:snipeitapp:snipe-it:4.1.13
Snipeitapp » Snipe-It » Version: 4.1.14

cpe:2.3:a:snipeitapp:snipe-it:4.1.14
Snipeitapp » Snipe-It » Version: 4.1.2

cpe:2.3:a:snipeitapp:snipe-it:4.1.2
Snipeitapp » Snipe-It » Version: 4.1.3

cpe:2.3:a:snipeitapp:snipe-it:4.1.3
Snipeitapp » Snipe-It » Version: 4.1.4

cpe:2.3:a:snipeitapp:snipe-it:4.1.4
Snipeitapp » Snipe-It » Version: 4.1.5

cpe:2.3:a:snipeitapp:snipe-it:4.1.5
Snipeitapp » Snipe-It » Version: 4.1.6

cpe:2.3:a:snipeitapp:snipe-it:4.1.6
Snipeitapp » Snipe-It » Version: 4.1.7

cpe:2.3:a:snipeitapp:snipe-it:4.1.7
Snipeitapp » Snipe-It » Version: 4.1.8

cpe:2.3:a:snipeitapp:snipe-it:4.1.8
Snipeitapp » Snipe-It » Version: 4.1.9

cpe:2.3:a:snipeitapp:snipe-it:4.1.9
Snipeitapp » Snipe-It » Version: 4.2.0

cpe:2.3:a:snipeitapp:snipe-it:4.2.0
Snipeitapp » Snipe-It » Version: 4.3.0

cpe:2.3:a:snipeitapp:snipe-it:4.3.0
Snipeitapp » Snipe-It » Version: 4.4.0

cpe:2.3:a:snipeitapp:snipe-it:4.4.0
Snipeitapp » Snipe-It » Version: 4.4.1

cpe:2.3:a:snipeitapp:snipe-it:4.4.1
Snipeitapp » Snipe-It » Version: 4.5.0

cpe:2.3:a:snipeitapp:snipe-it:4.5.0
Snipeitapp » Snipe-It » Version: 4.6.0

cpe:2.3:a:snipeitapp:snipe-it:4.6.0
Snipeitapp » Snipe-It » Version: 4.6.1

cpe:2.3:a:snipeitapp:snipe-it:4.6.1
Snipeitapp » Snipe-It » Version: 4.6.10

cpe:2.3:a:snipeitapp:snipe-it:4.6.10
Snipeitapp » Snipe-It » Version: 4.6.11

cpe:2.3:a:snipeitapp:snipe-it:4.6.11
Snipeitapp » Snipe-It » Version: 4.6.12

cpe:2.3:a:snipeitapp:snipe-it:4.6.12
Snipeitapp » Snipe-It » Version: 4.6.13

cpe:2.3:a:snipeitapp:snipe-it:4.6.13
Snipeitapp » Snipe-It » Version: 4.6.14

cpe:2.3:a:snipeitapp:snipe-it:4.6.14
Snipeitapp » Snipe-It » Version: 4.6.15

cpe:2.3:a:snipeitapp:snipe-it:4.6.15
Snipeitapp » Snipe-It » Version: 4.6.16

cpe:2.3:a:snipeitapp:snipe-it:4.6.16
Snipeitapp » Snipe-It » Version: 4.6.17

cpe:2.3:a:snipeitapp:snipe-it:4.6.17
Snipeitapp » Snipe-It » Version: 4.6.18

cpe:2.3:a:snipeitapp:snipe-it:4.6.18
Snipeitapp » Snipe-It » Version: 4.6.2

cpe:2.3:a:snipeitapp:snipe-it:4.6.2
Snipeitapp » Snipe-It » Version: 4.6.3

cpe:2.3:a:snipeitapp:snipe-it:4.6.3
Snipeitapp » Snipe-It » Version: 4.6.4

cpe:2.3:a:snipeitapp:snipe-it:4.6.4
Snipeitapp » Snipe-It » Version: 4.6.5

cpe:2.3:a:snipeitapp:snipe-it:4.6.5
Snipeitapp » Snipe-It » Version: 4.6.6

cpe:2.3:a:snipeitapp:snipe-it:4.6.6
Snipeitapp » Snipe-It » Version: 4.6.7

cpe:2.3:a:snipeitapp:snipe-it:4.6.7
Snipeitapp » Snipe-It » Version: 4.6.8

cpe:2.3:a:snipeitapp:snipe-it:4.6.8
Snipeitapp » Snipe-It » Version: 4.6.9

cpe:2.3:a:snipeitapp:snipe-it:4.6.9
Snipeitapp » Snipe-It » Version: 4.7.0

cpe:2.3:a:snipeitapp:snipe-it:4.7.0
Snipeitapp » Snipe-It » Version: 4.7.1

cpe:2.3:a:snipeitapp:snipe-it:4.7.1
Snipeitapp » Snipe-It » Version: 4.7.2

cpe:2.3:a:snipeitapp:snipe-it:4.7.2
Snipeitapp » Snipe-It » Version: 4.7.3

cpe:2.3:a:snipeitapp:snipe-it:4.7.3
Snipeitapp » Snipe-It » Version: 4.7.4

cpe:2.3:a:snipeitapp:snipe-it:4.7.4
Snipeitapp » Snipe-It » Version: 4.7.5

cpe:2.3:a:snipeitapp:snipe-it:4.7.5
Snipeitapp » Snipe-It » Version: 4.7.6

cpe:2.3:a:snipeitapp:snipe-it:4.7.6
Snipeitapp » Snipe-It » Version: 5.0.0

cpe:2.3:a:snipeitapp:snipe-it:5.0.0
Snipeitapp » Snipe-It » Version: 5.0.1

cpe:2.3:a:snipeitapp:snipe-it:5.0.1
Snipeitapp » Snipe-It » Version: 5.0.10

cpe:2.3:a:snipeitapp:snipe-it:5.0.10
Snipeitapp » Snipe-It » Version: 5.0.11

cpe:2.3:a:snipeitapp:snipe-it:5.0.11
Snipeitapp » Snipe-It » Version: 5.0.12

cpe:2.3:a:snipeitapp:snipe-it:5.0.12
Snipeitapp » Snipe-It » Version: 5.0.2

cpe:2.3:a:snipeitapp:snipe-it:5.0.2
Snipeitapp » Snipe-It » Version: 5.0.3

cpe:2.3:a:snipeitapp:snipe-it:5.0.3
Snipeitapp » Snipe-It » Version: 5.0.4

cpe:2.3:a:snipeitapp:snipe-it:5.0.4
Snipeitapp » Snipe-It » Version: 5.0.5

cpe:2.3:a:snipeitapp:snipe-it:5.0.5
Snipeitapp » Snipe-It » Version: 5.0.6

cpe:2.3:a:snipeitapp:snipe-it:5.0.6
Snipeitapp » Snipe-It » Version: 5.0.7

cpe:2.3:a:snipeitapp:snipe-it:5.0.7
Snipeitapp » Snipe-It » Version: 5.0.8

cpe:2.3:a:snipeitapp:snipe-it:5.0.8
Snipeitapp » Snipe-It » Version: 5.0.9

cpe:2.3:a:snipeitapp:snipe-it:5.0.9
Snipeitapp » Snipe-It » Version: 5.1.0

cpe:2.3:a:snipeitapp:snipe-it:5.1.0
Snipeitapp » Snipe-It » Version: 5.1.1

cpe:2.3:a:snipeitapp:snipe-it:5.1.1
Snipeitapp » Snipe-It » Version: 5.1.2

cpe:2.3:a:snipeitapp:snipe-it:5.1.2
Snipeitapp » Snipe-It » Version: 5.1.3

cpe:2.3:a:snipeitapp:snipe-it:5.1.3
Snipeitapp » Snipe-It » Version: 5.1.4

cpe:2.3:a:snipeitapp:snipe-it:5.1.4
Snipeitapp » Snipe-It » Version: 5.1.5

cpe:2.3:a:snipeitapp:snipe-it:5.1.5
Snipeitapp » Snipe-It » Version: 5.1.6

cpe:2.3:a:snipeitapp:snipe-it:5.1.6
Snipeitapp » Snipe-It » Version: 5.1.7

cpe:2.3:a:snipeitapp:snipe-it:5.1.7
Snipeitapp » Snipe-It » Version: 5.1.8

cpe:2.3:a:snipeitapp:snipe-it:5.1.8
Snipeitapp » Snipe-It » Version: 5.2.0

cpe:2.3:a:snipeitapp:snipe-it:5.2.0
Snipeitapp » Snipe-It » Version: 5.3.0

cpe:2.3:a:snipeitapp:snipe-it:5.3.0
Snipeitapp » Snipe-It » Version: 5.3.1

cpe:2.3:a:snipeitapp:snipe-it:5.3.1
Snipeitapp » Snipe-It » Version: 5.3.2

cpe:2.3:a:snipeitapp:snipe-it:5.3.2
Snipeitapp » Snipe-It » Version: 5.3.3

cpe:2.3:a:snipeitapp:snipe-it:5.3.3
Snipeitapp » Snipe-It » Version: 5.3.4

cpe:2.3:a:snipeitapp:snipe-it:5.3.4
Snipeitapp » Snipe-It » Version: 5.3.5

cpe:2.3:a:snipeitapp:snipe-it:5.3.5
Snipeitapp » Snipe-It » Version: 5.3.6

cpe:2.3:a:snipeitapp:snipe-it:5.3.6
Snipeitapp » Snipe-It » Version: 5.3.7

cpe:2.3:a:snipeitapp:snipe-it:5.3.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23064

Products

Pricing

Contact Us