~ / search / GHSA-2cv5-qvq3-6276

GHSA-2cv5-qvq3-6276

TeamPass vulnerable to Improper Encoding or Escaping of Output

Source: GitHub Advisory Database (reviewed) High CVE-2023-3552

Packages

EcosystemPackageAffectedFixed in
Packagist nilsteampassnet/teampass < 3.0.10 3.0.10

Details

As written in the advisory (Markdown source, shown as plain text).

TeamPass prior to 3.0.10 is vulnerable to cross-site scripting filter bypass in folder names. This can lead to information disclosure.

References

External links from the advisory. They lead to third-party sites.