CVE-2019-16904 - TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin

Back Back to CVE browser

MEDIUM

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin

Published Sep 26, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.69%

Description

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the change history of the item or tapping on the item.)

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5215
Advisory
https://github.com/advisories/GHSA-rpmr-fwh5-24fm
Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2685
x_refsource_MISCExploitThird Party Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2734
https://nvd.nist.gov/vuln/detail/CVE-2019-16904

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-5215		Advisory
https://github.com/advisories/GHSA-rpmr-fwh5-24fm		Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2685		x_refsource_MISCExploitThird Party Advisory
https://github.com/nilsteampassnet/TeamPass/issues/2734
https://nvd.nist.gov/vuln/detail/CVE-2019-16904