CVE-2022-0579

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.

• CWE-862
• CWE-862

• https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1Patch, Third Party Advisory
• https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849Exploit, Patch, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1Patch, Third Party Advisory
• https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849Exploit, Patch, Third Party Advisory

Published

Feb 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0573JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable t…8.8
• CVE-2022-0574Improper Access Control in GitHub repository publify/publify…6.5
• CVE-2022-0575Cross-site Scripting (XSS) - Stored in Packagist librenms/li…5.4
• CVE-2022-0576Cross-site Scripting (XSS) - Generic in Packagist librenms/l…6.1
• CVE-2022-0577Exposure of Sensitive Information to an Unauthorized Actor i…6.5
• CVE-2022-0578Code Injection in GitHub repository publify/publify prior to…6.5
• CVE-2022-0580Incorrect Authorization in Packagist librenms/librenms prior…8.8
• CVE-2022-0581Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.…7.5
• CVE-2022-0582Unaligned access in the CSN.1 protocol dissector in Wireshar…9.8
• CVE-2022-0583Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3…7.5
• CVE-2022-0585Large loops in multiple protocol dissectors in Wireshark 3.6…6.5
• CVE-2022-0586Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0…7.5