HIGH7.5
GHSA-83h6-22cp-f22w
TeamPass files are available without authentication
Details
TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/nilsteampassnet/teampass
No fixed version published yet for nilsteampassnet/teampass (composer). Pin to a known-safe version or switch to an alternative.