HIGH8.8

GHSA-6jf9-8m34-96w5

TeamPass PHP arbitrary file include vulnerability

Details

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/nilsteampassnet/teampass

Introduced in: 0

No fixed version published yet for nilsteampassnet/teampass (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-12479[ADVISORY]
https://github.com/nilsteampassnet/TeamPass/issues/2762[WEB]
https://github.com/nilsteampassnet/TeamPass/pull/2874[WEB]
https://github.com/nilsteampassnet/TeamPass[PACKAGE]