CVE-2022-1511

Missing Authorization in GitHub repository snipe/snipe-it prior to 5.4.4.

• CWE-862
• CWE-862

• https://github.com/snipe/snipe-it/commit/2e9cf8fa87a025c0eac9f79f4864b3fdd33a950cPatch, Third Party Advisory
• https://huntr.dev/bounties/4a1723e9-5bc4-4c4b-bceb-1c45964cc71dExploit, Third Party Advisory
• https://github.com/snipe/snipe-it/commit/2e9cf8fa87a025c0eac9f79f4864b3fdd33a950cPatch, Third Party Advisory
• https://huntr.dev/bounties/4a1723e9-5bc4-4c4b-bceb-1c45964cc71dExploit, Third Party Advisory

Published

Apr 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1505The RSVPMaker plugin for WordPress is vulnerable to unauthen…7.5
• CVE-2022-1506The WP Born Babies WordPress plugin through 1.0 does not san…5.4
• CVE-2022-1507chafa: NULL Pointer Dereference in function gif_internal_dec…5.5
• CVE-2022-1508An out-of-bounds read flaw was found in the Linux kernel’s i…6.1
• CVE-2022-1509Command Injection Vulnerability in GitHub repository hestiac…8.8
• CVE-2022-1510An issue has been discovered in GitLab affecting all version…7.5
• CVE-2022-1512The ScrollReveal.js Effects WordPress plugin through 1.2 doe…4.8
• CVE-2022-1513A potential vulnerability was reported in Lenovo PCManager p…8.8
• CVE-2022-1514Stored XSS via upload plugin functionality in zip format in …5.4
• CVE-2022-1515A memory leak was discovered in matio 1.5.21 and earlier in …5.5
• CVE-2022-1516A NULL pointer dereference flaw was found in the Linux kerne…5.5
• CVE-2022-1517LRM utilizes elevated privileges. An unauthenticated malicio…9.8