Skip to content
OpenAdvisories
High · 7.4 CVE-2022-1155 EUVD-2022-1334GHSA-636j-7x7r-gvw2

Old sessions are not blocked by the login enable function. in snipe/snipe-it

Published Mar 30, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: snipe Product: snipe/snipe-it Package: snipe/snipe-it Ecosystem: Packagist

Description

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.

Affected products

VendorProductAffectedFixed
snipe snipe/snipe-it unspecified – < 5.3.10 5.3.10

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist snipe/snipe-it >= 6.0.0-RC-1, < 6.0.0-RC-6 6.0.0-RC-6 GHSA-636j-7x7r-gvw2
Packagist snipe/snipe-it < 5.4.2 5.4.2 GHSA-636j-7x7r-gvw2

References