[HIGH] Snipe-IT allows users to promote or demote themselves or other users

PKSA-z8qx-662q-rf8y CVE-2024-5685 GHSA-544r-fc65-v832

Affected package: snipe/snipe-it

Affected version: <6.4.2

Reported by:
GitHub