In breve
- CVE-2019-17205 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda nilsteampassnet/teampass, teampass (teampass).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 63.7% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
Description
TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.
NVD description
TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free