CVE-2023-1545

CVE-2023-1545 affects Teampass (nilsteampassnet/teampass) prior to 3.0.0.23, where an SQL Injection vulnerability exists in the application flow described by public advisories. The connected documents provide concrete technical details: PoCs and public exploits exist for Teampass versions around ...

CVE-2023-1463 Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...

CVE-2023-1070

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

CVE-2023-1070 External Control of File Name or Path in nilsteampassnet/teampass

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

Cross-site Scripting (XSS)

nilsteampassnet/TeamPass is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of password is not sanitized when displayed in a preview from a search result...