๐Ÿ” CVE Alert

CVE-2023-3086

CRITICAL 9.0

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

CVSS Score
9.0
EPSS Score
0.0%
EPSS Percentile
0th

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CWE CWE-79
Vendor nilsteampassnet
Product nilsteampassnet/teampass
Published Jun 3, 2023
Last Updated Jan 8, 2025
Stay Ahead of the Next One

Get instant alerts for nilsteampassnet nilsteampassnet/teampass

Be the first to know when new critical vulnerabilities affecting nilsteampassnet nilsteampassnet/teampass are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected Versions

nilsteampassnet / nilsteampassnet/teampass
unspecified < 3.0.9

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
huntr.dev: https://huntr.dev/bounties/17be9e8a-abe8-41db-987f-1d5b0686ae20 github.com: https://github.com/nilsteampassnet/teampass/commit/1c0825b67eb8f8b5ecc418ff7614423a275e6a79