{"id":"CVE-2022-0579","published":"2022-02-14T19:00:10Z","modified":"2024-08-02T23:32:46Z","title":"Missing Authorization in snipe/snipe-it","vendor":"snipe","product":"snipe/snipe-it","tier":"tail","description":{"text":"Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01054,"percentile":0.64266,"provenance":"source"},"cwes":[{"id":"CWE-862","name":"Missing Authorization"}],"references":[{"url":"https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1","tags":["x_refsource_MISC"]}],"priority":{"score":17.4,"factors":[{"name":"EPSS percentile","points":12.85},{"name":"CVSS severity","points":4.55}]},"vendorSlug":"snipe","affectedVersions":[{"vendor":"snipe","product":"snipe/snipe-it","versions":[">= unspecified, < 5.3.9"]}],"affected":[{"ecosystem":"Packagist","package":"snipe/snipe-it","vulnerableRanges":["<5.3.9"],"patched":["5.3.9"],"from":["GHSA-v6vg-pxvv-g5cq"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-1190","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-snipe-snipe-it-cve-2022-0179","packageHistory":[{"cve":"CVE-2022-0179","published":"2022-01-12","fixed":"5.3.7","kev":false},{"cve":"CVE-2022-0178","published":"2022-01-13","fixed":"5.3.8","kev":false,"link":{"from":"CVE-2022-0178","to":"CVE-2022-0579","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:snipe/snipe-it","fromFixed":"5.3.8","toFixed":"5.3.9","daysApart":32},{"kind":"similar","provenance":"machine","score":0.48,"basis":"same product + CWE + description similarity"}]}},{"cve":"CVE-2022-23064","published":"2022-05-02","fixed":"5.3.8","kev":false},{"cve":"CVE-2022-0579","published":"2022-02-14","fixed":"5.3.9","kev":false},{"cve":"CVE-2022-0569","published":"2022-02-12","fixed":"5.3.10","kev":false,"link":{"from":"CVE-2022-0579","to":"CVE-2022-0569","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:snipe/snipe-it","fromFixed":"5.3.9","toFixed":"5.3.10","daysApart":-2}]}},{"cve":"CVE-2022-0611","published":"2022-02-15","fixed":"5.3.11","kev":false},{"cve":"CVE-2022-0622","published":"2022-02-17","fixed":"5.3.11","kev":false}],"package":"Packagist:snipe/snipe-it"}}