CVE Catalog
CVE-2023-3190
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk0.52%
40th percentile - higher than 40% of all known CVEs
Summary
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
Risk Assessment
This vulnerability may lead to XSS attacks, posing a threat to the application's security and user data.
Recommendation
It is recommended to upgrade to version 3.0.9 or later to mitigate this vulnerability.
Original NVD description (English source)
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.