~ / search / GHSA-83h6-22cp-f22w

GHSA-83h6-22cp-f22w

TeamPass files are available without authentication

Source: GitHub Advisory Database (reviewed) High CVE-2020-12478

Packages

EcosystemPackageAffectedFixed in
Packagist nilsteampassnet/teampass 2.1.27.36 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.

References

External links from the advisory. They lead to third-party sites.