Lucene search
HistoryMay 09, 2023 - 10:15 a.m.
CVE-2023-2591
cve-2023-2591
improper neutralization of input
web page generation
cross-site scripting
github repository
nilsteampassnet
teampass
version 3.0.7
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.7%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
Affected configurations
Node
teampassteampassRange<3.0.7
Related
prion
prion
Cross site scripting
2023-05-09 10:15:00
osv
osv
CVE-2023-2591
2023-05-09 10:15:10
teampass vulnerable to code injection
2023-05-09 12:30:22
github
github
teampass vulnerable to code injection
2023-05-09 12:30:22
cve
cve
CVE-2023-2591
2023-05-09 10:15:10
cvelist
cvelist
huntr
huntr
Stored HTML Injection in Item Label
2023-05-07 12:40:59
openvas
openvas
TeamPass < 3.0.7 Multiple Vulnerabilities
2023-05-08 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.7%
Related for NVD:CVE-2023-2591