TeamPass mail_me operation authorization issue

MEDIO 5.3CVE-2024-50702 · GHSA-7rm3-4w6j-8xx4 · Published 30/12/2024 · updated 17/06/2026

En resumen

CVE-2024-50702 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a nilsteampassnet/teampass, teampass (teampass).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.31%, mayor que el 23.8% de las vulnerabilidades.
Solución: actualizar a 3.1.3.1 o posterior.

Package	Affected versions	Patched versions
nilsteampassnet/teampass Packagist	`< 3.1.3.1`	`3.1.3.1`
teampass teampass	`< 3.1.3.1`	`3.1.3.1`

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

NVD description

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 3.1.3.1

3.1.3.1

< 3.1.3.1

3.1.3.1

Más vulnerabilidades de nilsteampassnet/teampass

Ver todo →