En bref
- CVE-2017-15278 est une vulnérabilité MOYENNE (CVSS 5.4) touchant nilsteampassnet/teampass, teampass (teampass).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.95%, plus élevée que 61.2% des vulnérabilités.
- Correctif : mettre à jour vers 2.1.27.9 ou plus récent.
Description
Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
NVD description
Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Autres vulnérabilités de nilsteampassnet/teampass
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free