Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1yNjhtLTR2MzktY2Y0M84AAYDy

TeamPass stored cross-site scripting (XSS) vulnerability

Multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass before 2.1.27.9 allow authenticated remote attackers to inject arbitrary web script or HTML via the (1) URL value of an item or (2) user log history. To exploit the vulnerability, the attacker must be first authenticated to the application. For the first one, the attacker has to simply inject XSS code within the URL field of a shared item. For the second one however, the attacker must prepare a payload within its profile, and then ask an administrator to modify its profile. From there, whenever the administrator accesses the log, it can be XSS'ed.

Permalink: https://github.com/advisories/GHSA-r68m-4v39-cf43
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNjhtLTR2MzktY2Y0M84AAYDy
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 11 days ago

CVSS Score: 5.4
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Identifiers: GHSA-r68m-4v39-cf43, CVE-2017-15051
References:

• https://nvd.nist.gov/vuln/detail/CVE-2017-15051
• https://github.com/nilsteampassnet/TeamPass/commit/5f16f6bb132138ee04eb1e0debf2bdc7d7b7a15f
• http://blog.amossys.fr/teampass-multiple-cve-01.html
• https://github.com/advisories/GHSA-r68m-4v39-cf43

Repository: https://github.com/nilsteampassnet/TeamPass
Blast Radius: 3.3

Affected Packages