{"id":"CVE-2021-4089","aliases":["GHSA-9vwf-54m9-gc4f"],"url":"https://o3.security/vulnerability/CVE-2021-4089","summary":"snipe-it is vulnerable to Improper Access Control","details":"snipe-it is vulnerable to Improper Access Control","published":"2021-12-10T20:15:08.737Z","modified":"2026-08-27T08:14:46.580317Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"snipe/snipe-it","fixedVersion":"5.3.4"}],"fix":{"url":"https://github.com/snipe/snipe-it/commit/1699c09758e56f740437674a8d6ba36443399f24","label":"snipe/snipe-it@1699c09"},"references":[{"type":"FIX","url":"https://github.com/snipe/snipe-it/commit/1699c09758e56f740437674a8d6ba36443399f24"},{"type":"FIX","url":"https://huntr.dev/bounties/19453ef1-4d77-4cff-b7e8-1bc8f3af0862"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-27T08:14:46.580317Z"}}