| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | TeamPass Authorization Control Vulnerability | 6 May 202000:00 | – | cnvd |
 | CVE-2020-11671 | 4 May 202013:27 | – | cvelist |
 | EUVD-2021-1468 | 7 Oct 202500:30 | – | euvd |
 | Missing Authorization in TeamPass | 26 Jul 202121:22 | – | github |
 | CVE-2020-11671 | 4 May 202013:27 | – | mend |
 | CVE-2020-11671 | 4 May 202014:15 | – | nvd |
 | TeamPass <= 2.1.27.36 Multiple XSS Vulnerabilities | 9 Aug 201900:00 | – | openvas |
 | GHSA-GMR7-M73X-6C9Q Missing Authorization in TeamPass | 26 Jul 202121:22 | – | osv_ghsa |
 | Design/Logic Flaw | 4 May 202014:15 | – | prion |
 | PT-2020-12761 | 4 May 202000:00 | – | ptsecurity |
10
| Source | Link |
|---|---|
| github | www.github.com/nilsteampassnet/TeamPass/issues/2765 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| api/index.php | path | api/index.php | Lack of authorization controls in the REST API allows an authenticated user with a valid API token to perform administrative actions, such as becoming an administrator and reading/modifying all passwords. | CWE-862 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:50Current
6.8Medium risk
Vulners AI Score6.8
CVSS 25.8
CVSS 3.18.1
EPSS0.01138