GHSA-48q3-m4hf-56c9

Source

https://github.com/advisories/GHSA-48q3-m4hf-56c9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-48q3-m4hf-56c9/GHSA-48q3-m4hf-56c9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-48q3-m4hf-56c9

Aliases

CVE-2015-7562

Published

2022-05-17T02:49:21Z

Modified

2025-04-22T18:12:16.006704Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

TeamPass vulnerable to Cross-site Scripting

Details

Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

Database specific

{
    "github_reviewed": true,
    "nvd_published_at": "2017-04-12T22:59:00Z",
    "severity": "MODERATE",
    "github_reviewed_at": "2025-04-22T17:33:02Z",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Packagist / nilsteampassnet/teampass

Package

Name: nilsteampassnet/teampass
Purl: pkg:composer/nilsteampassnet/teampass

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.25

Affected versions

2.*

2.1.21

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-48q3-m4hf-56c9/GHSA-48q3-m4hf-56c9.json"