CVE-2021-4075

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

• CWE-918

• https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34ePatch, Third Party Advisory
• https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597deExploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34ePatch, Third Party Advisory
• https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597deExploit, Issue Tracking, Patch, Third Party Advisory

Published

Dec 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40739Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-4074The WHMCS Bridge WordPress plugin is vulnerable to Stored Cr…5.4
• CVE-2021-40740Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40741Adobe Audition version 14.4 (and earlier) is affected by an …5.5
• CVE-2021-40742Adobe Audition version 14.4 (and earlier) is affected by a N…5.5
• CVE-2021-40745Adobe Campaign version 21.2.1 (and earlier) is affected by a…7.5
• CVE-2021-40750Adobe Bridge version 11.1.1 (and earlier) is affected by a N…5.5
• CVE-2021-40751Adobe After Effects version 18.4 (and earlier) is affected b…7.8
• CVE-2021-40752Adobe After Effects version 18.4 (and earlier) is affected b…7.8
• CVE-2021-40753Adobe After Effects version 18.4.1 (and earlier) is affected…7.8
• CVE-2021-40754Adobe After Effects version 18.4.1 (and earlier) is affected…7.8
• CVE-2021-40755Adobe After Effects version 18.4.1 (and earlier) is affected…7.8