Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
CVE-2021-4075
See a problem?
Please try reporting it
to the source
first.
Source
https://cve.org/CVERecord?id=CVE-2021-4075
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-4075.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-4075
Aliases
GHSA-553q-hpvp-q8pc
Published
2021-12-06T21:15:07.907Z
Modified
2026-05-15T04:03:59.540700178Z
Severity
7.2 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
snipe-it is vulnerable to Server-Side Request Forgery (SSRF)
References
https://github.com/snipe/snipe-it/commit/4612b9e711b3ff5d2bcddbec5b18866d25f8e34e
https://huntr.dev/bounties/4386fd8b-8c80-42bb-87b8-b506c46597de
Affected packages
CVE-2021-4075 - OSV