TeamPass mail_me operation authorization issue

MÉDIO 5.3CVE-2024-50702 · GHSA-7rm3-4w6j-8xx4 · Published 30/12/2024 · updated 17/06/2026

Em resumo

CVE-2024-50702 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta nilsteampassnet/teampass, teampass (teampass).
Chance de exploração nos próximos 30 dias (EPSS): 0.31%, maior que 23.8% das vulnerabilidades.
Correção: atualize para 3.1.3.1 ou posterior.

Package	Affected versions	Patched versions
nilsteampassnet/teampass Packagist	`< 3.1.3.1`	`3.1.3.1`
teampass teampass	`< 3.1.3.1`	`3.1.3.1`

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

NVD description

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 3.1.3.1

3.1.3.1

< 3.1.3.1

3.1.3.1

Mais vulnerabilidades de nilsteampassnet/teampass

Ver tudo →