Snipe-IT Version v6.0.2

Vulnerability Explanation:

An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file.

Attack Vectors:

• We found a vulnerability file upload, when we upload malicious file at Update Branding Settings page.

Payload :

https://github.com/bypazs/GrimTheRipper/blob/main/GrimTheRipperTeam.svg

Tested on:

1. Snipe-IT Version v6.0.2
2. Google Chrome Version 102.0.5005.61 (Official Build) (64-bit)

Affected Component:

• Affected in Branding Settings page on favicon tab (http:///uploads/malicious_file.svg)

Steps to attack:

1. Login to the target application with admin privileges.
2. Click at the gear icon in the upper right corner.