CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

Cross site scripting

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload...

CVE-2019-12950

CVE-2019-12950 affects TeamPass 2.1.27.35. The issue is a Cross-site Scripting (XSS) vulnerability in the sources/items.queries.php "Import items" feature, where loading a crafted CSV file can carry an XSS payload. Root cause: parsing a manipulated CSV leads to client-side script execution. Explo...

Information Disclosure

nilsteampassnet/teampass is vulnerable to information disclosure. Passwords are stored in a recoverable format in the application and can be retrieved by a remote attacker who has successfully bypassed authentication...

TeamPass <= 2.1.27 Information Disclosure Vulnerability

TeamPass is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teampass:teampass";...

CVE-2019-1000001

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role...

Design/Logic Flaw

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role...

CVE-2019-1000001

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role...

CVE-2019-1000001

TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recoverable Format vulnerability in Shared password vaults that can result in all shared passwords are recoverable server side. This attack appears to be exploitable via any vulnerability that can bypass authentication or role...

CVE-2019-1000001

CVE-2019-1000001 affects TeamPass 2.1.27 and earlier, where passwords are stored in a recoverable format within shared password vaults. The underlying issue enables recovery of all shared passwords, and the description notes exploitation possible via bypassing authentication or role assignment. T...

Cross-site Request Forgery (CSRF)

TeamPass is vulnerable to cross-site request forgery CSRF attacks. The library does not generate session tokens for users, meaning a user can pass a malicious request as another user...

Authorization Bypass

TeamPass is vulnerable to authorization bypass. The application does not properly check if a user has the proper permissions to access an item, allowing a malicious user to modify or delete multiple attributes of an item by modifying requests sent to the application...

Remote Code Execution (RCE) Through Arbitrary File Upload

nilsteampassnet/teampass is vulnerable to remote code execution RCE attacks. A malicious user can modify the the parameters in a HTTP request to upload.files.php to upload an arbitrary file that when accessed on the server is executed...

Authorization Bypass

TeamPass is vulnerable to authorization bypass. The application does not properly enforce user role permissions, allowing a malicious user to modify or delete another user's role in the application...

Authorization Bypass

TeamPass is vulnerable to authorization bypass. The library does not properly check if a user has the proper permissions to modify the attributes of other users, allowing a malicious user to delete or modify another user's account...

Cross-site Scripting (XSS)

nilsteampassnet/teampass is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary webscript through the URL value of item object or the log history of a user...

TeamPass roles.queries.php Access Control Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. An access control vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to properly enforce administrator access control. An attacker can exploit the vulnerability by gaining administrato...

TeamPass items.series.php Access Control Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. An access control vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to properly enforce item access control. An attacker can exploit the vulnerability by tampering with requests to...