555 matches found
CVE-2023-3191
CVE-2023-3191 affects nilsteampassnet/teampass prior to 3.0.9. The issue is a stored XSS caused by user input not being properly sanitized in the application, enabling stored XSS vectors. Remediation: upgrade to 3.0.9 or later (as documented in PT-2023-23513 and related advisories). No exploitati...
PT-2023-23506 · Teampass · Teampass
Name of the Vulnerable Software and Affected Versions: teampass versions prior to 3.0.9 Description: The issue is related to improper encoding or escaping of output in the GitHub repository nilsteampassnet/teampass. This may have led to stored cross-site scripting XSS vectors in the application d...
CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
TeamPass 跨站脚本漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. A cross-site scripting vulnerability exists in versions prior to TeamPass 3.0.9. An attacker could exploit this vulnerability to perform cross-site scripting XSS attacks...
CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
HTML Injection in Folder Name
Description The folder name does not sanitize folder name and due to missing output encoding, HTML user-input is rendered in the webpage during folder deletion. Proof of Concept 1. Login to Teampass as any user. 2. Go to Folders tab. 3. Create a new folder with HTML tag in the Label. Example: HTM...
The vulnerability of the TeamPass password manager, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks.
The vulnerability of the TeamPass password manager is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
TeamPass vulnerable to Improper Access Control
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
GHSA-G3JR-6VJ4-3X82 TeamPass vulnerable to Improper Access Control
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3095
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3095
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
Improper access control
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
TeamPass 访问控制错误漏洞
TeamPass is an open source password manager from the individual developer Nils Laumaillé. An Access Control Error vulnerability exists in versions prior to TeamPass 3.0.9 that stems from improper access control...
CVE-2023-3095
CVE-2023-3095 describes an improper access control vulnerability in the open-source TeamPass project (nilsteampassnet/teampass) prior to version 3.0.9. The connected advisories and records consistently note an access-control failure that could permit unauthorized access to items via ID or similar...
CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
TeamPass vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...
GHSA-J245-V2MH-5H6F TeamPass vulnerable to stored Cross-site Scripting
Cross-site Scripting XSS - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9...