CVE-2018-19301

CVE-2018-19301 affects tp4a TELEPORT 3.1.0 and is an XSS vulnerability: a crafted username mishandled on the login page can be reflected when an administrator later views the system log. Multiple sources (NVD entry, CNVD/CVEs) describe the issue as a cross-site scripting flaw in the login flow, t...

CVE-2018-19555

tp4a TELEPORT 3.1.0 is affected by a CSRF vulnerability that allows an attacker to use the user/do-reset-password endpoint to change any password, including the administrator password. This is documented across multiple sources (NVD/NVD-derived refs, OSV, CVE lists) as a CSRF flaw that enables un...