Cross-Site Scripting Vulnerability in TeamPass by TeamPass
CVE-2019-12950

5.4MEDIUM

Key Information:

Vendor

Teampass

Status
Teampass
Vendor
CVE Published:
6 August 2019

What is CVE-2019-12950?

A vulnerability exists in TeamPass version 2.1.27.35 that allows an attacker to exploit the 'Import items' feature through a specially crafted CSV file. This could lead to the execution of malicious scripts in the context of the user's session, posing security risks. It is essential for users to assess their exposure to this vulnerability and implement necessary mitigations.

References

https://github.com/nilsteampassnet/TeamPass/releases
x_refsource_MISC
https://github.com/nilsteampassnet/TeamPass/issues/2638
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.