Lucene search

K
githubGitHub Advisory DatabaseGHSA-M3PP-JCPM-2VR9
HistoryMay 24, 2022 - 4:52 p.m.

TeamPass Cross-site Scripting (XSS)

2022-05-2416:52:39
CWE-79
GitHub Advisory Database
github.com
2

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php “Import items” feature, it is possible to load a crafted CSV file with an XSS payload.

CPENameOperatorVersion
nilsteampassnet/teampassle2.1.27.35

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

Related for GHSA-M3PP-JCPM-2VR9