Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28pv-2j2h-fmhc

Опубликовано: 17 мая 2022
Источник: github
Github: Прошло ревью
CVSS3: 5.4

Описание

TeamPass Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Пакеты

Наименование

nilsteampassnet/teampass

composer
Затронутые версииВерсия исправления

< 2.1.27.9

2.1.27.9

EPSS

Процентиль: 52%
0.00292
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
почти 8 лет назад

Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

CVSS3: 5.4
debian
почти 8 лет назад

Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. ...

EPSS

Процентиль: 52%
0.00292
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79