https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:08:56.244509+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-5685 CVE-2024-5685 — Broken Function Level Authorization (BFLA) in snipe/snipe-it 2026-10-05T20:08:56.261010+00:00

Affected: snipe-it, snipeitapp snipe-it

Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes to the group's memberships via API call.This issue affects snipe-it: from v4.6.17 through v6.4.1.