564 matches found
CVE-2023-2516
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
CVE-2023-2516 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.7, which can be exploited by an attacker to inject malicious code into a shared folder, steal user credentials, and compromise th...
CVE-2023-2516
Summary: CVE-2023-2516 is a stored XSS vulnerability in nilsteampassnet/teampass prior to 3.0.7. When two users have access to the same folder, creating a new item and inserting an XSS payload into the item’s name can trigger the XSS when the item is viewed by another user. This affects Teampass ...
CVE-2023-2516 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7...
Cross-Site Scripting (XSS)
nilsteampassnet/teampass is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to a lack of user-input sanitization in the item description field which allows an attacker to inject and execute arbitrary JavaScript into the browser...
TeamPass < 3.0.3 XSS Vulnerability
TeamPass is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass"...
GHSA-4H2Q-84W7-4MHX nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)
nilsteampassnet/teampass prior to 3.0.3 is vulnerable to stored cross-site scripting XSS in the description parameter of a folder...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
PT-2023-17414 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.3 Description: The issue is related to stored Cross-site Scripting XSS in the GitHub repository nilsteampassnet/teampass. Specifically, the description parameter of a folder is vulnerable. This allows an attacke...
CVE-2023-2021
CVE-2023-2021 concerns a stored Cross-site Scripting (XSS) vulnerability in TeamPass (nilsteampassnet/teampass) prior to version 3.0.3. The issue arises from unsanitized input in the folder description parameter, allowing injection of scripts that run in a victim’s browser when the affected conte...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in TeamPass 3.0.3 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability...
CVE-2023-2021 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3...
PT-2023-3088 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to improper access control in the teampass password manager, which can be exploited by a remote attacker to disclose protected information. Recommendations: For versions prior...
Teampass SQL Injection vulnerability
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
GHSA-PPXM-Q2H4-V7MM Teampass SQL Injection vulnerability
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...
Sql injection
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23...
CVE-2023-1545
CVE-2023-1545 affects Teampass (nilsteampassnet/teampass) prior to 3.0.0.23, where an SQL Injection vulnerability exists in the application flow described by public advisories. The connected documents provide concrete technical details: PoCs and public exploits exist for Teampass versions around ...