564 matches found
CVE-2023-3191
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3190
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3190
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
Input validation
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
PT-2023-23506 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to improper encoding or escaping of output in the GitHub repository nilsteampassnet/teampass. This may have led to stored cross-site scripting XSS vectors in the application d...
TeamPass 安全漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.0.9 that stems from improperly escaping output encoding...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9. An attacker could exploit this vulnerability to perform cross-site scripting XSS attacks...
CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
PT-2023-23513 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to Cross-site Scripting XSS - Stored, where some user input was not properly sanitized, potentially leading to stored cross-site scripting vectors in the application...
CVE-2023-3191
CVE-2023-3191 affects nilsteampassnet/teampass prior to 3.0.9. The issue is a stored XSS caused by user input not being properly sanitized in the application, enabling stored XSS vectors. Remediation: upgrade to 3.0.9 or later (as documented in PT-2023-23513 and related advisories). No exploitati...
CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3190
CVE-2023-3190 affects nilsteampassnet/teampass prior to version 3.0.9 due to improper encoding/escaping of output. The vulnerability is described as enabling stored XSS vectors in the application (per OSV/GHSA entries). Impacts include potential manipulation of user input display; remediation is ...
HTML Injection in Folder Name
Description The folder name does not sanitize folder name and due to missing output encoding, HTML user-input is rendered in the webpage during folder deletion. Proof of Concept 1. Login to Teampass as any user. 2. Go to Folders tab. 3. Create a new folder with HTML tag in the Label. Example: HTM...
The vulnerability of the TeamPass password manager, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks.
The vulnerability of the TeamPass password manager is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
TeamPass vulnerable to Improper Access Control
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
GHSA-G3JR-6VJ4-3X82 TeamPass vulnerable to Improper Access Control
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...