CyberRota Analysis
AI-GeneratedThe vulnerability affects Snipe-IT versions prior to 8.6.2, where the user edit flow improperly handles the attacker-controlled Referer header, allowing for open redirect attacks. This could enable an attacker to redirect users to malicious sites after a legitimate user action, potentially leading to phishing or credential theft. Organizations using Snipe-IT should prioritize updating to version 8.6.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores url()->previous() from the attacker-controlled Referer header into Laravel’s intended URL session value and later uses redirect()->intended(...) when redirect_option=back is submitted, allowing Snipe-IT to be used as a trusted redirector after a legitimate user edit action. This issue is fixed in version 8.6.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)