MEDIUM5.8
GHSA-6x4j-8954-5hxm
Snipe-IT has a 2FA reset privilege bypass
Quick fix
GHSA-6x4j-8954-5hxm — snipe/snipe-it: upgrade to the fixed version with the command below.
composer require snipe/snipe-it:^8.5.0Details
### Impact A user who can edit other users could reset a superadmin's 2FA.
### Patches Patched in 8.5.0
Are you affected?
Enter the version of the package you're using.