CVE-2026-3107

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-3107

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3107.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-3107

Published

2026-03-31T08:58:59.688Z

Modified

2026-07-15T01:49:14.562110365Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Multiple vulnerabilities in Teampass

Details

Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=items'. The application fails to properly sanitize and encode user-input data during the import process, allowing malicious JavaScript payloads to be persistently stored in the database. When other users view the imported passwords, the payload is automatically executed in their browsers, resulting in a stored XSS condition at the endpoint 'redacted/index.php?page=items'. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code in the context of multiple users and the administrator, which can lead to session hijacking, credential theft, privilege abuse, and compromise of application integrity.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3107.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "3.1.5.16"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "last_affected": "3.1.5.16"
                }
            ],
            "source": "CPE_FIELD"
        }
    ],
    "cna_assigner": "INCIBE",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / github.com/nilsteampassnet/teampass

Affected ranges

Type

GIT

Repo

https://github.com/nilsteampassnet/teampass

Events

Introduced

bd4cdfba7df5f421d7131af3bd1a163215553180

Fixed

12c274ce262b58e7568fb6795888c0faac0bd452

Database specific

{
    "cpe": "cpe:2.3:a:teampass:teampass:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "3.1.5.16"
        },
        {
            "fixed": "3.1.5.24"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

3.*

3.1.5.16

3.1.5.17

3.1.5.18

3.1.5.19

3.1.5.20

3.1.5.21

3.1.5.22

3.1.5.23

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3107.json"