CVE-2023-2859 Code Injection in nilsteampassnet/teampass

2023-05-2400:00:00

CWE-94

@huntrdev

www.cve.org

code injection

nilsteampassnet/teampass

github

repository

prior to 3.0.9

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CNA Affected

[
  {
    "vendor": "nilsteampassnet",
    "product": "nilsteampassnet/teampass",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.0.9",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]