A vulnerability was found in Grokability Snipe-IT up to 8.3.6. It has been declared as critical. Affected is an unknown function of the component API Handler. Such manipulation leads to dynamically-determined object attributes.
This vulnerability is uniquely identified as CVE-2025-15602. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.
