Snipe-IT 8.6.3 Race Condition via Consumable Checkout

Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint

Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components

Snipe-IT before 8.7.0 License Key Exposure via CSV Export

Snipe-IT before 8.7.0 Information Disclosure via Custom Fields

Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export

Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report

Snipe-IT before 8.7.0 Acceptance Finalization Without Stored Evidence

Snipe-IT before 8.7.1 Denial of Service via Unbounded Note Field

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

Snipe-IT: User Account Escalation via CSV Import

Snipe-IT: Path traversal vulnerability via CSV import `image` field

Snipe-IT: Improper Privilege Management

Snipe-IT: Directory traversal in displaySig

Snipe-IT's selectlist visibility is too permissive

Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay

Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

snipe-it before 8.7.0 Data Loss via Failed Image Write

Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update

Snipe-IT: 2FA reset privilege bypass

Snipe-IT 8.5.0 through 8.6.3 Open Redirect via SAML RelayState

Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive

Snipe-IT: Stored DOM XSS via table selected-count IDs

Snipe-IT: Open Redirect After User Edit

Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()

Snipe-IT: TOTP Brute-Forceable Due to Missing Rate Limiting on `POST /two-factor`

Snipe-IT: Import created_by can be overwritten

Snipe-IT before 8.7.0 SSRF Port Scanning via Webhook Testing Endpoint

Snipe-IT Vulnerable to Privilege Escalation for self via API Permissions Assignment

Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API

Snipe-IT before 8.7.2 Authorization Bypass via Predefined Kit Checkout

Snipe-IT 8.6.3 Broken Access Control via Kit Update Endpoints

Snipe-IT 8.6.3 Stored XSS via Department Names

Snipe-IT before 8.7.0 Improper Input Validation via API Checkout

snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag

Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth

snipe-it before 8.7.0 Authorization Bypass via Asset Audit Endpoints

snipe-it before 8.7.0 Authorization Bypass via Pivot-Only User

Snipe-IT: Improper Authorization in File Deletion (IDOR)

Snipe-IT Checkout Request Cancellation IDOR

Snipe-IT: Stored XSS via Markdown custom field

Snipe-IT: Missing object-level authorization in Kits API

Snipe-IT: XSS vulnerability in component notes

Snipe-IT before 8.7.0 Cross-Company Read via requested-assets

Snipe-IT before 8.7.0 Authorization Bypass via Asset Acceptance Report

snipe-it before 8.7.0 SSRF via IPv6 transition address bypass

Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped report endpoint

Snipe-IT: CSS Injection via `header_color` Setting

Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store

Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout