Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

snipe/snipe-it

              master @ 4b16384
            

287

Fixes

CVEs

CRITICAL

Peak severity

41.4%

Coverage

Highlights

Auth Bypass: 121 prior fixes. Scrutinize any change in this area.

app/Http/Controllers/Auth/LoginController.php: most-fixed (14 issues). Treat as high-risk during review.

176 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass / Broken Access Control: Widespread recurring authorization bypasses across various controllers, often due to missing or incorrectly applied permission checks, leading to cross-company data access, unauthorized modifications, and privilege escalation.

Information Disclosure: Recurring exposure of sensitive data, especially license serials and purchase costs, through missing 'viewKeys' permission checks in reports, views, and transformers.

Auth Bypass: Multiple authentication bypasses and session-related issues in the login controller, including inactive user login, SAML replay, missing throttling, and activation field check bugs.