Lucene search

K
githubGitHub Advisory DatabaseGHSA-RPMR-FWH5-24FM
HistoryMay 24, 2022 - 10:00 p.m.

TeamPass Cross-site Scripting (XSS) vulnerability

2022-05-2422:00:46
CWE-79
GitHub Advisory Database
github.com
2

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

TeamPass 2.1.27.36 allows XSS by setting a crafted password for an item in a folder, and then sharing that item with an admin. (The crafted password is exploitable when viewing the change history, or the previous used password field.)

CPENameOperatorVersion
nilsteampassnet/teampassle2.1.27.36

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.2%

Related for GHSA-RPMR-FWH5-24FM