nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-2021 · ADVISORY
• nilsteampassnet/teampass commit 77c541a · WEB
• nilsteampassnet/TeamPass · PACKAGE
• huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0 · WEB

Lỗ hổng khác của nilsteampassnet/teampass

• CVE-2024-50703CAO 8.1TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.
• CVE-2024-50702TRUNG BÌNH 5.3TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.
• CVE-2024-50701TRUNG BÌNH 4.3TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user…
• CVE-2023-3565TRUNG BÌNH 5.4Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
• CVE-2023-3553CAO 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.