Teampass CVE-2023-3552

MEDIUM

Improper Encoding or Escaping of Output (CWE-116)

2023-07-08 security@huntr.dev

Information Disclosure Teampass

5.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Jul 08, 2023 - 09:15 nvd

MEDIUM 5.4

DescriptionNVD

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

AnalysisAI

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-116. Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10. Affected products include: Teampass. Version information: prior to 3.0.10..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Teampass

View all

CVE-2015-7564 CRITICAL Act Now POC

Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co

CVE-2023-3086 CRITICAL Act Now POC

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. Rated critical severit

CVE-2015-7563 HIGH This Week POC

Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the aut

CVE-2023-2859 HIGH This Week POC

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9. Rated high severity (CVSS 8.8), this vulner

CVE-2020-12479 HIGH This Week POC

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP

CVE-2023-3083 HIGH This Week POC

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. Rated high severity (C

CVE-2017-15055 HIGH This Week POC

TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. Rated high sev

CVE-2023-3084 HIGH This Week POC

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. Rated high severity (C

CVE-2020-11671 HIGH This Week POC

Lack of authorization controls in REST API functions in TeamPass through 2.1.27.36 allows any TeamPass user with a valid

CVE-2017-15054 HIGH This Week POC

An arbitrary file upload vulnerability, present in TeamPass before 2.1.27.9, allows remote authenticated users to upload

CVE-2014-3773 HIGH This Week POC

Multiple SQL injection vulnerabilities in TeamPass before 2.1.20 allow remote attackers to execute arbitrary SQL command

CVE-2014-3772 HIGH This Week POC

TeamPass before 2.1.20 allows remote attackers to bypass access restrictions via a request to index.php followed by a di

Same weakness CWE-116 – Improper Encoding or Escaping of Output

View all

CVE-2013-4547 HIGH POC

CVE-2026-20245 HIGH POC

CVE-2022-36446 CRITICAL POC

CVE-2017-8303 CRITICAL POC

CVE-2022-30781 HIGH POC

CVE-2023-46301 CRITICAL POC

CVE-2023-46300 CRITICAL POC

CVE-2022-41443 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2023-3552 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy