Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2022-1155

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.

VectorNETWORK

PublishedMar 30, 2022, 13:15

Published Bysecurity@huntr.dev

Base Score

Score7.4

Package (Ecosystem)IntroducedFixedLimit

snipe/snipe-it(Packagist)6.0.0-RC-16.0.0-RC-6N/A

snipe/snipe-it(Packagist)05.4.2N/A

NVD-CWE-noinfo

Base Score

7.4

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK