CVE-2023-1545

SQL Injection in nilsteampassnet/teampass

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

Affected

nilsteampassnet · nilsteampassnet/teampass

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.0 HUNTR

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

8.35% chance of exploitation in the next 30 days, 95th percentile

Published

2023-03-21

Updated

2025-02-26

Proof-of-concept exploits (5)

• https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2
• HarshRajSinghania/CVE-2023-1545-Exploit0★ · 2025-02-22
• gunzf0x/CVE-2023-15450★ · 2025-06-02
• sternstundes/CVE-2023-1545-POC-python0★ · 2025-03-01
• zer0-dave/CVE-2023-1545-POC1★ · 2025-02-24

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52094

Security advisories

• advisories/GHSA-ppxm-q2h4-v7mm
• nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66

References

• CVE Record
• NVD entry

Related

• CVE-2017-0144
• CVE-2019-0703
• CVE-2020-0796
• CVE-2021-1675
• CVE-2022-38023
• CVE-2026-71294