CVE-2023-3190

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3191

CVE-2023-3191 affects nilsteampassnet/teampass prior to 3.0.9. The issue is a stored XSS caused by user input not being properly sanitized in the application, enabling stored XSS vectors. Remediation: upgrade to 3.0.9 or later (as documented in PT-2023-23513 and related advisories). No exploitati...

CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3190

CVE-2023-3190 affects nilsteampassnet/teampass prior to version 3.0.9 due to improper encoding/escaping of output. The vulnerability is described as enabling stored XSS vectors in the application (per OSV/GHSA entries). Impacts include potential manipulation of user input display; remediation is ...

CVE-2023-3095

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3095

CVE-2023-3095 describes an improper access control vulnerability in the open-source TeamPass project (nilsteampassnet/teampass) prior to version 3.0.9. The connected advisories and records consistently note an access-control failure that could permit unauthorized access to items via ID or similar...

CVE-2023-3086

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3084

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3083 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3084

CVE-2023-3084 is a stored XSS vulnerability in TeamPass (nilsteampassnet/teampass) prior to version 3.0.9. The issue arises from handling user input stored on the server and later displayed without proper sanitization, enabling script execution in contexts such as folder names (per Huntr entry) a...

CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3083

CVE-2023-3083 describes a stored Cross-site Scripting (XSS) vulnerability in the TeamPass project (nilsteampassnet/teampass) affecting versions prior to 3.0.9. Multiple connected sources corroborate: the XSS occurs through stored input in the application (e.g., user name) and can compromise data ...

CVE-2023-3009

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3009

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3009 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

CVE-2023-3009

CVE-2023-3009 describes a stored XSS vulnerability in the TeamPass project nilsteampassnet/teampass, present in versions before 3.0.9. The issue allows injecting JavaScript via an item name stored in a shared folder, triggering code execution for other users with folder access. Connected sources ...