Cross-Site Scripting (XSS)

2022-03-2908:39:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

reflected cross-site scripting

index.php

improper sanitization

arbitrary scripts

teampass

EPSS

0.001

Percentile

30.0%

JSON

nilsteampassnet/teampass is vulnerable to reflected cross-site scripting. The vulnerability exists in index.php due to improper sanitization which allows an attacker to inject and execute arbitrary scripts.

References

gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca

github.com/advisories/GHSA-m2wv-m5pf-284r

github.com/nilsteampassnet/TeamPass/commit/3ebe8ce354ffd20c9aa93f3d92a1f76d7e8618a0

github.com/nilsteampassnet/TeamPass/commits/teampass_2

github.com/nilsteampassnet/TeamPass/issues/2642

EPSS

0.001

Percentile

30.0%

JSON

Related for VERACODE:34865