CVE Catalog

CVE-2023-3095

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.38%

30th percentile - higher than 30% of all known CVEs

Summary

Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.

Risk Assessment

The organization may be exposed to unauthorized access to data, potentially leading to information leakage.

Recommendation

It is recommended to upgrade to version 3.0.9 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS