nxvh1337/cve-2025-15602-pocSnipe-IT < 8.3.7 Mass Assignment Vulnerability Leading to Privilege Escalation
CVE-2025-15602-PoC is a proof of concept for the vulnerability CVE-2025-15602 in Snipe-IT. One script to list all users and one script to take over an superadmin account.
A user as only the right to edit users, he can abuse it to list and to do an account takeover of the superadmin
Dont forget to change the BASE_URL in the script to match your instance of snipe-it.
Lists all users from the instance, to get the id of the superadmin you want to take over.
python3 list_users.py --attacker-username your_user --attacker-password your_pass --max-id 100
Dont forget to change the BASE_URL in the script to match your instance of snipe-it.
Takes over an superadmin account via mass assignment
IMPORTANT: you need to get the right info from list_users.py first or it won't work. The id, username and first_name must be exactly the same as the target account.
python3 exploit_auth.py \
--target-id 1 \
--admin-username admin \
--admin-firstname Admin \
--admin-email [email protected] \
--attacker-username your_user \
--attacker-password your_pass
After that you can reset the password via the email you set
pip install requests beautifulsoup4