Paper/Archive/CVE-2023-3551

CVE-2023-3551

nilsteampassnet nilsteampassnet/teampass — Code Injection in nilsteampassnet/teampass

EPSS 1%public exploit CVSS 9.1

critical.is priorityof 100

51

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 66.6.666 × 2013.3 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

Affected

ProductAffectedFixed inSource

nilsteampassnet/teampassunspecified – < 3.0.103.0.10CNA

teampass< 3.0.103.0.10CISA-ADP

Scores by source

@huntrdev (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refhuntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7 refgithub.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6f