Vulnerability in Snipe Snipe-It
CVE-2022-23064
In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.013 (69.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 70th percentile — 69.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: +0.000
Affected products
- Snipe Snipe-It — versions v3.0-alpha, unspecified
- Snipeitapp Snipe-It — versions 3.0.0
Weakness classification (CWE)
References
- github.com/snipe/snipe-it/commit/0c4768fd2a11ac26a61814cef23a71061bfd8bcc (Patch, Third Party Advisory)
- www.whitesourcesoftware.com/vulnerability-database/CVE-2022-23064 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-23064?
- CVE-2022-23064 is a high-severity vulnerability in Snipe Snipe-It, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 8.8/10. Published 2022-05-02.
- How severe is CVE-2022-23064?
- High severity. CVSS v3 base score is 8.8 out of 10.