Snipeitapp: >> Snipe-It >> 6.3.1 Security Vulnerabilities
Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1.
CVSS Score
7.6
EPSS Score
0.004
Published
2024-06-14
Page 5