{"action":"Upgrade nilsteampassnet/teampass to 3.0.3 or later.","affected":[{"fixed":"3.0.3","introduced":"0"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2023-2021"],"ecosystem":"Packagist","epss":0.00363,"exploited":false,"fixed_versions":["3.0.3"],"ghsa_id":"GHSA-4h2q-84w7-4mhx","id":"tcs_01M5KETZQQS5XYH5TMF6G7XRMN","modified_at":"2023-11-08T04:11:22.008343Z","published_at":"2023-04-13T12:30:35Z","references":["https://osv.dev/vulnerability/GHSA-4h2q-84w7-4mhx","https://nvd.nist.gov/vuln/detail/CVE-2023-2021","https://github.com/nilsteampassnet/teampass/commit/77c541a0151841d1f4ceb0a84ca391e1b526d58d","https://github.com/nilsteampassnet/TeamPass","https://huntr.dev/bounties/2e31082d-7aeb-46ff-84d6-9561758e3bf0"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-4h2q-84w7-4mhx","url":"https://osv.dev/vulnerability/GHSA-4h2q-84w7-4mhx"}],"summary":"nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)"}