{"id":"CVE-2022-1155","aliases":["GHSA-636j-7x7r-gvw2"],"url":"https://o3.security/vulnerability/CVE-2022-1155","summary":"Old sessions are not blocked by the login enable function. in snipe/snipe-it","details":"Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10.","published":"2022-03-30T12:20:14Z","modified":"2026-07-15T01:49:21.602771312Z","cvss":{"score":7.4,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"snipe/snipe-it","fixedVersion":"6.0.0-RC-6"},{"ecosystem":"Packagist","name":"snipe/snipe-it","fixedVersion":"5.4.2"}],"fix":{"url":"https://github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d","label":"snipe/snipe-it@bdabbbd"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/ebc26354-2414-4f72-88aa-f044aec2b2e1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1155.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1155"},{"type":"FIX","url":"https://github.com/snipe/snipe-it/commit/bdabbbd4e98e88ee01e728ceb4fd512661fbd38d"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:21.602771312Z"}}