Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1jNmZ2LTNqbTktNnI4Zs4AAznt

TeamPass vulnerable to stored Cross-site Scripting

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Permalink: https://github.com/advisories/GHSA-c6fv-3jm9-6r8f
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmZ2LTNqbTktNnI4Zs4AAznt
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 1 year ago
Updated: about 1 year ago

CVSS Score: 8.7
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

EPSS Percentage: 0.00103
EPSS Percentile: 0.43036

Identifiers: GHSA-c6fv-3jm9-6r8f, CVE-2023-3083
References:

• https://nvd.nist.gov/vuln/detail/CVE-2023-3083
• https://github.com/nilsteampassnet/teampass/commit/79731553fa305d45dabb7a227f3074d56d7c94c1
• https://huntr.dev/bounties/c6b29e46-02e0-43ad-920f-28ac482ea2ab
• https://github.com/advisories/GHSA-c6fv-3jm9-6r8f

Repository: https://github.com/nilsteampassnet/teampass
Blast Radius: 5.2

Affected Packages