What’s Vulnerable › Vulnerabilities

CVE-2021-4075: Server-Side Request Forgery (SSRF) in snipe/snipe-it

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-12-06 · updated 2026-06-17
• Weakness: CWE-918

Description

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

Affected products

• grokability snipe-it: all versions

References

• https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e
• https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de
• https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e
• https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de

Get alerted when CVE-2021-4075 or the next vulnerability affects your stack