Vulnerability in Snipe Snipe-It
CVE-2022-23064
In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.
EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Snipe Snipe-it — versions v3.0-alpha, unspecified
- Snipeitapp Snipe-it — versions 3.0.0
Weakness classification (CWE)
References
- vulnerabilitylab@mend.io (Patch, Third Party Advisory, x_refsource_MISC)
- vulnerabilitylab@mend.io (Exploit, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2022-23064?
- CVE-2022-23064 is a high-severity vulnerability in Snipe Snipe-It, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 8.8/10. Published 2022-05-02.
- How severe is CVE-2022-23064?
- High severity. CVSS v3 base score is 8.8 out of 10.