CVE-2022-23064: In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request…

PriorityP348high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

1.26%

66.0th percentile

In Snipe-IT, versions v3.0-alpha to v5.3.7 are vulnerable to Host Header Injection. By sending a specially crafted host header in the reset password request, it is possible to send password reset links to users which once clicked lead to an attacker controlled server and thus leading to password reset token leak. This leads to account take over.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
snipe	snipe-it	>= 3.0-alpha < 5.4.0	5.4.0
snipe	snipe-it	unspecified – v5.3.7	—
snipe	snipe-it	>= v3.0-alpha < unspecified	unspecified
snipeitapp	snipe-it	—	—
snipeitapp	snipe-it	3.0.0 – 5.3.7	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.