CVE-2023-3565
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.
Risk Assessment
This vulnerability may lead to user data theft and session hijacking, posing a significant threat to the application's security and the organization's data.
Recommendation
It is recommended to upgrade to version 3.0.10 or later to mitigate this vulnerability.
Other vulnerabilities in nilsteampassnet/teampass
See all- CVE-2023-3086Critical
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3553High
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is an exposure of sensitive information to unauthorized actors.
- CVE-2023-3552Medium
In the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, there is improper encoding or escaping of output.
- CVE-2023-3551High
There is a code injection vulnerability in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10.
- CVE-2023-3531Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10, allowing for the storage of malicious code.
- CVE-2023-3191Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3190Medium
Improper encoding or escaping of output in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3095Medium
Improper Access Control exists in GitHub repository nilsteampassnet/teampass prior to version 3.0.9.
- CVE-2023-3084High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
- CVE-2023-3083High
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.9, allowing for the storage of malicious code.
Original NVD description (English source)
Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.