src_1653fbf8e2da6d59a7
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 11, 2026 20:26 UTC
- Retrieved
- Oct 08, 2026 03:51 UTC
Snipe-IT Checkout Request Cancellation IDOR
Snipe-IT Checkout Request Cancellation IDOR Snipe-IT is an open-source IT asset management application developed by Grokability, Inc. The endpoint that cancels asset checkout requests, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?}, trusts two user-controlled URL path parameters without performing a server-side authorization check. The cancel_by_admin segment is tre
Reference details
- Source category
- Research & news
- Report title
Snipe-IT Checkout Request Cancellation IDOR- First reported
- Aug 11, 2026 20:26 UTC
- Last reported
- Aug 11, 2026 20:26 UTC
- Catalog updated
- Oct 08, 2026 03:51 UTC
- Record ID
386c5b5b046b26519792cbb308293ef89807addccf03b5d7f841fa90e7d19e11
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.