CVE-2023-3551
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious code, potentially compromising the system.
Recommendation
It is recommended to upgrade to version 3.0.10 or later to mitigate this vulnerability.
Other vulnerabilities in nilsteampassnet/teampass
See all- CVE-2023-3086Critical
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3565Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.
- CVE-2023-3553High
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.
- CVE-2023-3552Medium
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
- CVE-2023-3531Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, allowing for the storage of malicious code.
- CVE-2023-3191Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3190Medium
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3095Medium
Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3084High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3083High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Original NVD description (English source)
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.