Lucene search

K
osvGoogleOSV:GHSA-6JF9-8M34-96W5
HistoryMay 24, 2022 - 5:16 p.m.

TeamPass PHP arbitrary file include vulnerability

2022-05-2417:16:59
Google
osv.dev
6
teampass 2.1.27.36
authenticated user
php file include
crafted http request
directory traversal
software

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

34.8%

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

34.8%

Related for OSV:GHSA-6JF9-8M34-96W5