high7.6
CVE-2023-3552
TeamPass vulnerable to Improper Encoding or Escaping of Output
Impact
TeamPass prior to 3.0.10 is vulnerable to cross-site scripting filter bypass in folder names. This can lead to information disclosure.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | nilsteampassnet/teampass | < 3.0.10 | 3.0.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teampass | Teampass | before 3.0.10 |