CVE-2023-3084
HighCVSS 8.1Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to upgrade to version 3.0.9 or later to mitigate this vulnerability.
Other vulnerabilities in nilsteampassnet/teampass
See all- CVE-2023-3086Critical
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3565Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.
- CVE-2023-3553High
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.
- CVE-2023-3552Medium
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
- CVE-2023-3551High
There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.
- CVE-2023-3531Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, allowing for the storage of malicious code.
- CVE-2023-3191Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3190Medium
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3095Medium
Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3083High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Original NVD description (English source)
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.