Vulnerabilities

TI-2023-03327 CVE-2023-3565 · GHSA-524r-w8fx-hqg3

Cross-site Scripting (XSS) - Generic in nilsteampassnet/teampass

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00625 Published 2023-07-08 Fixed in 3.0.10 CWE-79

TI-2023-03315 CVE-2023-3553 · GHSA-2rhg-hqq9-8xjh

HIGH 72

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00828 Published 2023-07-08 Fixed in 3.0.10 CWE-200

TI-2023-03314 CVE-2023-3552 · GHSA-2cv5-qvq3-6276

MEDIUM 58

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00541 Published 2023-07-08 Fixed in 3.0.10 CWE-116

TI-2023-03313 CVE-2023-3551 · GHSA-97hm-2mfr-2p97

HIGH 67

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01137 Published 2023-07-08 Fixed in 3.0.10 CWE-94