What is GHSA-2rhg-hqq9-8xjh?

GHSA-2rhg-hqq9-8xjh is a security advisory published by GitHub Security Advisories with High severity. TeamPass information exposure vulnerability

Which CVE IDs does GHSA-2rhg-hqq9-8xjh cover?

GHSA-2rhg-hqq9-8xjh covers the following CVE IDs: CVE-2023-3553. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2rhg-hqq9-8xjh?

GHSA-2rhg-hqq9-8xjh has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-2rhg-hqq9-8xjh?

GHSA-2rhg-hqq9-8xjh affects 1 product, including: composer/nilsteampassnet/teampass:\u003c 3.0.10.

GHSA-2rhg-hqq9-8xjhHighCVSS 7.5

TeamPass information exposure vulnerability

Vendor

GitHub Security Advisories

Published

July 8, 2023

Last Modified

November 10, 2023

🔗 CVE IDs covered (1)

CVE-2023-3553 →

📋 Description

TeamPass prior to 3.0.10 allows unauthenticated actors to view application-specific and user data and files by viewing an endpoint directory listing.

🎯 Affected products1

composer/nilsteampassnet/teampass:< 3.0.10

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-3553
https://github.com/nilsteampassnet/teampass/commit/e9f90b746fdde135da3c7fbe4fa22fe2bd32e66b
https://huntr.dev/bounties/857f002a-2794-4807-aa5d-2f340de01870
https://github.com/advisories/GHSA-2rhg-hqq9-8xjh