| Package | Affected versions | Patched versions |
|---|---|---|
| teampass | = 2.1= 2.1.1= 2.1.10= 2.1.13= 2.1.14= 2.1.15= 2.1.18= 2.1.19= 2.1.2= 2.1.3= 2.1.4= 2.1.5≤ 2.1.20 |
TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a direct request to a file that calls the session_start function before checking the CPM key, as demonstrated by a request to sources/upload/upload.files.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free