Snipe-IT Checkout Request Cancellation IDOR

T1Covered by 1 source · first reported by Tenable Research at 11 Aug, 20:26 UTC

Snipe-IT Checkout Request Cancellation IDOR Snipe-IT is an open-source IT asset management application developed by Grokability, Inc. The endpoint that cancels asset checkout requests, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?}, trusts two user-controlled URL…

devsecurity

Sources

• T1Snipe-IT Checkout Request Cancellation IDORTenable Research11 Aug, 20:26