CVE-2023-3086

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Affected

nilsteampassnet · nilsteampassnet/teampass

CVSS v3.1 NVD

9.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVSS v3.0 HUNTR

9.0 CRITICALCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS

0.91% chance of exploitation in the next 30 days, 59th percentile

Published

2023-06-03

Updated

2025-01-08

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/17be9e8a-abe8-41db-987f-1d5b0686ae20

Security advisories

• advisories/GHSA-j245-v2mh-5h6f
• nilsteampassnet/teampass/commit/1c0825b67eb8f8b5ecc418ff7614423a275e6a79

References

• CVE Record
• NVD entry