What is GHSA-7rm3-4w6j-8xx4?

GHSA-7rm3-4w6j-8xx4 is a security advisory published by GitHub Security Advisories with Medium severity. TeamPass mail_me operation authorization issue

Which CVE IDs does GHSA-7rm3-4w6j-8xx4 cover?

GHSA-7rm3-4w6j-8xx4 covers the following CVE IDs: CVE-2024-50702. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7rm3-4w6j-8xx4?

GHSA-7rm3-4w6j-8xx4 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-7rm3-4w6j-8xx4?

GHSA-7rm3-4w6j-8xx4 affects 1 product, including: composer/nilsteampassnet/teampass:\u003c 3.1.3.1.

GHSA-7rm3-4w6j-8xx4MediumCVSS 5.4

TeamPass mail_me operation authorization issue

Vendor

GitHub Security Advisories

Published

December 30, 2024

Last Modified

December 30, 2024

🔗 CVE IDs covered (1)

CVE-2024-50702 →

📋 Description

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

🎯 Affected products1

composer/nilsteampassnet/teampass:< 3.1.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-50702
https://github.com/nilsteampassnet/TeamPass/commit/35e2b479f2379545b4132bc30a9d052ba7018bf9
https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1
https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1
https://github.com/advisories/GHSA-7rm3-4w6j-8xx4