high8.8
CVE-2020-12479
TeamPass PHP arbitrary file include vulnerability
Impact
TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | nilsteampassnet/teampass | <= 2.1.27.36 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teampass | Teampass | Version 2.1.27.36 |