Lucene search
GoogleOSV:CVE-2023-2591HistoryMay 09, 2023 - 10:15 a.m.
CVE-2023-2591
2023-05-0910:15:10
Google
osv.dev
2
cve-2023-2591
web page generation
cross-site scripting
github
teampass
software
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.7%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
Related
cve
cve
CVE-2023-2591
2023-05-09 10:15:10
cvelist
cvelist
osv
osv
teampass vulnerable to code injection
2023-05-09 12:30:22
nvd
nvd
CVE-2023-2591
2023-05-09 10:15:10
github
github
teampass vulnerable to code injection
2023-05-09 12:30:22
huntr
huntr
Stored HTML Injection in Item Label
2023-05-07 12:40:59
prion
prion
Cross site scripting
2023-05-09 10:15:00
openvas
openvas
TeamPass < 3.0.7 Multiple Vulnerabilities
2023-05-08 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
7.1 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.7%
Related for OSV:CVE-2023-2591