GHSA-h5g9-2p35-54c7MediumCVSS 5.4

nilsteampassnet/teampass vulnerable to cross-site scripting

Published
May 31, 2023
Last Modified
November 4, 2023

🔗 CVE IDs covered (1)

📋 Description

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. This enables an attacker to inject malicious code into a shared folder, which can then be executed by other users who have access to the folder.

🎯 Affected products1

  • composer/nilsteampassnet/teampass:< 3.0.9

🔗 References (4)