~ / search / GHSA-4h2q-84w7-4mhx

GHSA-4h2q-84w7-4mhx

nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-2021

Packages

EcosystemPackageAffectedFixed in
Packagist nilsteampassnet/teampass < 3.0.3 3.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

nilsteampassnet/teampass prior to 3.0.3 is vulnerable to stored cross-site scripting (XSS) in the description parameter of a folder.

References

External links from the advisory. They lead to third-party sites.