TeamPass mail_me operation authorization issue

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-50702 · ADVISORY
• nilsteampassnet/TeamPass commit 35e2b47 · WEB
• nilsteampassnet/TeamPass · PACKAGE
• nilsteampassnet/TeamPass · WEB
• nilsteampassnet/TeamPass · WEB

nilsteampassnet/teampass のその他の脆弱性

• CVE-2024-50703高 8.1TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.
• CVE-2024-50701中 4.3TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user…
• CVE-2023-3565中 5.4Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
• CVE-2023-3553高 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
• CVE-2023-3552中 5.4Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.