Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS05N2htLTJtZnItMnA5N84AA0f9

TeamPass Code Injection vulnerability

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

Permalink: https://github.com/advisories/GHSA-97hm-2mfr-2p97
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05N2htLTJtZnItMnA5N84AA0f9
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 1 year ago
Updated: about 1 year ago

CVSS Score: 9.1
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS Percentage: 0.00117
EPSS Percentile: 0.46506

Identifiers: GHSA-97hm-2mfr-2p97, CVE-2023-3551
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-3551
• https://github.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6f
• https://huntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7
• https://github.com/advisories/GHSA-97hm-2mfr-2p97

Repository: https://github.com/nilsteampassnet/teampass
Blast Radius: 5.5

Affected Packages