| CVE-2026-3107 | 보통5.4 | Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=items'. The application fails to properly sanitize and encode user-input data during the import process, allowing malicious JavaScript payload | 31/03/2026 |
| CVE-2026-3106 | 보통5.4 | Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the application does not properly clean or encode the information entered by the user in | 31/03/2026 |
| CVE-2024-50703 | 높음8.1 | TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. | 30/12/2024 |
| CVE-2024-50702 | 보통5.3 | TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager. | 30/12/2024 |
| CVE-2024-50701 | 보통4.3 | TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. | 30/12/2024 |
| CVE-2023-3565 | 보통5.4 | Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 10/07/2023 |
| CVE-2023-3553 | 높음7.5 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3552 | 보통5.4 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3551 | 높음7.2 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 08/07/2023 |
| CVE-2023-3531 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10. | 06/07/2023 |
| CVE-2023-3191 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3190 | 보통4.6 | Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 10/06/2023 |
| CVE-2023-3095 | 보통6.5 | Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 04/06/2023 |
| CVE-2023-3086 | 심각9.0 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3084 | 높음8.1 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3083 | 높음8.7 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 03/06/2023 |
| CVE-2023-3009 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 31/05/2023 |
| CVE-2023-2859 | 높음8.8 | Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. | 24/05/2023 |
| CVE-2023-2591 | 보통5.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 09/05/2023 |
| CVE-2023-2516 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7. | 05/05/2023 |