CVE-2023-3552
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
Risk Assessment
This vulnerability may lead to XSS attacks, posing a threat to the application's security and user data.
Recommendation
It is recommended to upgrade to version 3.0.10 or later to mitigate this vulnerability.
Other vulnerabilities in nilsteampassnet/teampass
See all- CVE-2023-3086Critical
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3565Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.
- CVE-2023-3553High
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.
- CVE-2023-3551High
There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.
- CVE-2023-3531Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, allowing for the storage of malicious code.
- CVE-2023-3191Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3190Medium
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3095Medium
Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3084High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3083High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Original NVD description (English source)
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.