Packagist/nilsteampassnet/teampass CVE-2023-3551: critical 9.1, EPSS 1.14%

TeamPass Code Injection vulnerability

Action: Upgrade nilsteampassnet/teampass to 3.0.10 or later.

composer require nilsteampassnet/teampass:3.0.10

Affected

Fixed versions

Sources

• osv: GHSA-97hm-2mfr-2p97
• https://nvd.nist.gov/vuln/detail/CVE-2023-3551
• https://github.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6f
• https://github.com/nilsteampassnet/teampass
• https://huntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7

CVE-2023-3551 · published 2023-07-08T09:30:24Z · modified 2024-02-16T08:22:45.555687Z · JSON