~ / search / GHSA-2rhg-hqq9-8xjh

GHSA-2rhg-hqq9-8xjh

TeamPass information exposure vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-3553

Packages

EcosystemPackageAffectedFixed in
Packagist nilsteampassnet/teampass < 3.0.10 3.0.10

Details

As written in the advisory (Markdown source, shown as plain text).

TeamPass prior to 3.0.10 allows unauthenticated actors to view application-specific and user data and files by viewing an endpoint directory listing.

References

External links from the advisory. They lead to third-party sites.