{"id":"CVE-2022-0179","aliases":["GHSA-w3v3-cxq5-9vr4"],"url":"https://o3.security/vulnerability/CVE-2022-0179","summary":"Missing Authorization in snipe/snipe-it","details":"snipe-it is vulnerable to Missing Authorization","published":"2022-01-12T00:00:00Z","modified":"2026-08-27T03:49:19.619673448Z","cvss":{"score":6.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"snipe/snipe-it","fixedVersion":"5.3.7"}],"fix":{"url":"https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e","label":"snipe/snipe-it@cf14a02"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0179.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0179"},{"type":"FIX","url":"https://github.com/snipe/snipe-it/commit/cf14a0222c67472086cd08b2155f045edaf75f2e"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-27T03:49:19.619673448Z"}}