Observable discrepancy in snipe-it - #VU153896
Published: October 7, 2026
Vulnerability identifier: #VU153896
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-203
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to map internal networks by identifying open ports and active hosts.
The vulnerability exists due to observable response discrepancies in the Snipe-IT webhook testing endpoint when processing webhook test requests to arbitrary IP addresses. A remote privileged user can configure webhook targets and compare the resulting 4xx and 5xx responses to map internal networks by identifying open ports and active hosts.
Exploitation requires access to the Snipe-IT super-admin role. Targets can include loopback addresses and RFC1918 private addresses.
Affected software
snipe-it
Remediation
Install security update from vendor's website.
snipe-it - update to 8.7.0