CVE-2017-15278

2017-10-1208:29:00

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

CPENameOperatorVersion
teampasseq2.1.23.3
teampasseq2.1.26.9
teampasseq2.1.26.15
teampasseq2.1.23.1
teampasseq2.1.27.8
teampasseq2.1.26.12
teampasseq2.1.26.11
teampasseq2.1.26.18
teampasseq2.1.26.4
teampasseq2.1.26.8

Name	Operator	Version
teampass	eq	2.1.23.3
teampass	eq	2.1.26.9
teampass	eq	2.1.26.15
teampass	eq	2.1.23.1
teampass	eq	2.1.27.8
teampass	eq	2.1.26.12
teampass	eq	2.1.26.11
teampass	eq	2.1.26.18
teampass	eq	2.1.26.4
teampass	eq	2.1.26.8