CVE-2022-44381: Snipeitapp Snipe-It

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Snipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.

Affected products

• Snipeitapp Snipe-It: up to and including 6.0.14

Published 2022-12-25. Last modified 2026-06-17.