CVE-2022-2997

Session Fixation in GitHub repository snipe/snipe-it prior to 6.0.10.

Score

CVSS 3.1 8.0 High

Status

Modified - security@huntr.dev

Published

2022-08-25

Last modified

2024-08-03

Weaknesses

CWE-384

Affected products

• Snipesnipe-it (Snipe)
• Snipe-it (Snipeitapp)

References

• https://github.com/snipe/snipe-it/commit/6fde72a69335c80079363b7d26aa94e7f67400e1
• https://huntr.dev/bounties/c09bf21b-50d2-49f0-8c92-49f6b3c358d8