CNNVD-202509-3048 Information

CNNVD ID

CNNVD-202509-3048

CVE-2025-59713

  • CNNVD Published: 2025-09-19

Description (Chinese)

Snipe-IT是Grokability开源的一套开源IT资产/许可证管理系统。 Snipe-IT 8.1.18之前版本存在代码问题漏洞,该漏洞源于不安全的反序列化。

Description (English)

Snipe-IT is an open-source IT asset/licence management system for the open source of Grokability. The pre-Snipe-IT 8.1.18 version had a code problem loophole, which stemmed from unsafe backsequencing.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

Grouptime

Published

2025-09-19

Last Modified

2026-02-24

References

https://github.com/grokability/snipe-it/releases/tag/v8.1.18 https://access.redhat.com/security/cve/cve-2025-59713

Patch

https://github.com/grokability/snipe-it/releases

Share on: