CVE-2019-12950

Опубликовано: 06 авг. 2019

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.

Ссылки

https://github.com/nilsteampassnet/TeamPass/issues/2638
Exploit
Third Party Advisory
https://github.com/nilsteampassnet/TeamPass/releases
Release Notes
Third Party Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2638
Exploit
Third Party Advisory
https://github.com/nilsteampassnet/TeamPass/releases
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:teampass:teampass:2.1.27.35:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2019-12950

CVSS3: 5.4

debian

больше 6 лет назад

An issue was discovered in TeamPass 2.1.27.35. From the sources/items. ...

GHSA-m3pp-jcpm-2vr9

CVSS3: 5.4

github

больше 3 лет назад

TeamPass Cross-site Scripting (XSS)

EPSS

Процентиль: 43%

0.00206

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79