A vulnerability, which was classified as problematic, has been found in Snipe-IT up to 7.0.9. Affected by this issue is some unknown functionality. The manipulation of the argument APP_KEY leads to Privilege Escalation.

This vulnerability is handled as CVE-2024-48987. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.