CVE-2023-3095
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
Risk Assessment
The organization may be exposed to unauthorized access to data, potentially leading to information leakage.
Recommendation
It is recommended to upgrade to version 3.0.9 or later to mitigate this vulnerability.
Other vulnerabilities in nilsteampassnet/teampass
See all- CVE-2023-3086Critical
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3565Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.
- CVE-2023-3553High
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.
- CVE-2023-3552Medium
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
- CVE-2023-3551High
There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.
- CVE-2023-3531Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, allowing for the storage of malicious code.
- CVE-2023-3191Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3190Medium
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3084High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3083High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Original NVD description (English source)
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS