CVE Catalog
CVE-2023-3552
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.47%
37th percentile - higher than 37% of all known CVEs
Summary
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
Risk Assessment
This vulnerability may lead to XSS attacks, posing a threat to the application's security and user data.
Recommendation
It is recommended to upgrade to version 3.0.10 or later to mitigate this vulnerability.
Original NVD description (English source)
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.