CVE-2021-4075

HIGH

Snipe-IT <6.0.0 - Server-Side Request Forgery

Title source: manual

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

Core 2

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_misc

CVSS v3 7.2

EPSS 0.0089

EPSS Percentile 54.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-918

Status published

Products (2)

snipe/snipe-it 0 - 6.0.0-GMPackagist

snipeitapp/snipe-it

Published Dec 06, 2021

Tracked Since Feb 18, 2026