~ / search / GHSA-7rm3-4w6j-8xx4

GHSA-7rm3-4w6j-8xx4

TeamPass mail_me operation authorization issue

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-50702

Packages

EcosystemPackageAffectedFixed in
Packagist nilsteampassnet/teampass < 3.1.3.1 3.1.3.1

Details

As written in the advisory (Markdown source, shown as plain text).

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

References

External links from the advisory. They lead to third-party sites.