CVE-2023-3565

40th percentile - higher than 40% of all known CVEs

A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository nilsteampassnet/teampass prior to version 3.0.10. An attacker can exploit this vulnerability to inject malicious scripts in the user's context.

This vulnerability may lead to user data theft and session hijacking, posing a significant threat to the application's security and the organization's data.

It is recommended to upgrade to version 3.0.10 or later to mitigate this vulnerability.