Nilsteampassnet/teampass

This hub aggregates every CVE we track for Nilsteampassnet/teampass, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Nilsteampassnet/teampass.

• CVE-2024-50702TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.5.4Dec 30, 2024
• CVE-2024-50703TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.5.4Dec 30, 2024
• CVE-2024-50701TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.4.3Dec 30, 2024
• CVE-2023-3565Cross-site Scripting (XSS) - Generic in nilsteampassnet/teampass5.4Jul 8, 2023
• CVE-2023-3553Exposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass7.5Jul 8, 2023
• CVE-2023-3552Improper Encoding or Escaping of Output in nilsteampassnet/teampass5.4Jul 8, 2023
• CVE-2023-3551Code Injection in nilsteampassnet/teampass7.2Jul 8, 2023
• CVE-2023-3531Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass5.4Jul 6, 2023
• CVE-2023-3191Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass5.4Jun 10, 2023
• CVE-2023-3190Improper Encoding or Escaping of Output in nilsteampassnet/teampass4.6Jun 10, 2023
• CVE-2023-3095Improper Access Control in nilsteampassnet/teampass6.5Jun 4, 2023
• CVE-2023-3086Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass9.0Jun 3, 2023
• CVE-2023-3084Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.1Jun 3, 2023
• CVE-2023-3083Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.7Jun 3, 2023
• CVE-2023-3009Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass5.4May 31, 2023