MEDIUM4.6

GHSA-p7xm-g427-jxfc

Teampass Cross-site Scripting vulnerability

Quick fix

GHSA-p7xm-g427-jxfc — nilsteampassnet/teampass: upgrade to the fixed version with the command below.

composer require nilsteampassnet/teampass:^3.0.9

Details

In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting (XSS) vectors in the application.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/nilsteampassnet/teampass

Introduced in: 0Fixed in: 3.0.9

Fixcomposer require nilsteampassnet/teampass:^3.0.9

References

https://nvd.nist.gov/vuln/detail/CVE-2023-3190[ADVISORY]
https://github.com/nilsteampassnet/teampass/commit/241dbd4159a5d63b55af426464d30dbb53925705[WEB]
https://github.com/nilsteampassnet/teampass[PACKAGE]
https://huntr.dev/bounties/5562c4c4-0475-448f-a451-7c4666bc7180[WEB]