CVE-2022-0622

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.

Score

CVSS 3.1 5.3 Medium

Status

Modified - security@huntr.dev

Published

2022-02-17

Last modified

2024-08-02

Weaknesses

CWE-209

Affected products

• Snipesnipe-it (Snipe)
• Snipe-it (Snipeitapp)

References

• https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2
• https://huntr.dev/bounties/4ed99dab-5319-4b6b-919a-84a9acd0061a