CVE-2023-3553 Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3553 Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3552

The CVE-2023-3552 entry concerns TeamPass (nilsteampassnet/teampass) prior to version 3.0.10, where improper encoding or escaping of output enables cross-site scripting in folder names. The root cause is insufficient encoding/escaping of outputs, allowing injection of malicious content into the i...

CVE-2023-3552 Improper Encoding or Escaping of Output in nilsteampassnet/teampass

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3551

CVE-2023-3551 applies to nilsteampassnet/teampass prior to 3.0.10, where a lack of input restrictions allows code injected into tp.config.php to be executed (Remote Code Execution). Documented impact is high/critical with network-based access and no required user interaction. remediation is to up...

CVE-2023-3551 Code Injection in nilsteampassnet/teampass

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

PT-2023-25240 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.10 Description: The issue is related to Cross-site Scripting XSS - Generic. Recommendations: For versions prior to 3.0.10, update to version 3.0.10 or later to resolve the issue...

TeamPass 信息泄露漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. An information disclosure vulnerability exists in versions prior to TeamPass 3.0.10, which originates from exposing sensitive information to unauthorized participants...

PT-2023-25223 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.10 Description: The issue allows unauthenticated actors to view application-specific and user data and files by viewing an endpoint directory listing, resulting in the exposure of sensitive information to...

PT-2023-25221 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.10 Description: The issue is related to Code Injection in the GitHub repository nilsteampassnet/teampass. Recommendations: For versions prior to 3.0.10, update to version 3.0.10 or later to resolve the issue...

TeamPass 代码注入漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A code injection vulnerability exists in versions prior to TeamPass 3.0.10. An attacker could exploit this vulnerability to perform a code injection attack...

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.10 that stems from incorrect output encoding or escaping...

PT-2023-25222 · Teampass · Teampass

Name of the Vulnerable Software and Affected Versions: TeamPass versions prior to 3.0.10 Description: The issue is related to improper encoding or escaping of output, which can lead to cross-site scripting filter bypass in folder names, potentially resulting in information disclosure...

TeamPass Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

GHSA-PWRW-G29Q-3MP8 TeamPass Cross-site Scripting vulnerability

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3531

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3531 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

CVE-2023-3531

CVE-2023-3531: Cross-site Scripting (XSS) in nilsteampassnet/teampass prior to 3.0.10. The vulnerability is described as a stored XSS on the Search page, resulting from insufficient input sanitization in the pages/item component. Exploitation details are not consistently provided across documents...

CVE-2023-3531 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10...

TeamPass 跨站脚本漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. TeamPass suffers from a cross-site scripting vulnerability that stems from the presence of a stored-type cross-site scripting vulnerability...