CVE-2024-50703
TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.
- Actualiza a 3.1.3.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
nilsteampassnet/teampass 2.1.27.36: vulnerabilidades conocidas
Vulnerabilidades conocidas que afectan a nilsteampassnet/teampass 2.1.27.36: 32. Compara las versiones corregidas de abajo con la que tienes instalada.
Vulnerabilidades: 32
CVE-2024-50702
TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.
- Actualiza a 3.1.3.1
Publicación ActualizaciónCVE-2024-50701
TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.
- Actualiza a 3.1.3.1
Publicación ActualizaciónCross-site Scripting (XSS) - Generic in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
- Actualiza a 3.0.10
Publicación ActualizaciónExposure of Sensitive Information to an Unauthorized Actor in nilsteampassnet/teampass
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
- Actualiza a 3.0.10
Publicación ActualizaciónImproper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
- Actualiza a 3.0.10
Publicación ActualizaciónCode Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
- Actualiza a 3.0.10
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
- Actualiza a 3.0.10
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónImproper Encoding or Escaping of Output in nilsteampassnet/teampass
Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónImproper Access Control in nilsteampassnet/teampass
Improper Access Control in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónCode Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
- Actualiza a 3.0.9
Publicación ActualizaciónImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
- Actualiza a 3.0.7
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
- Actualiza a 3.0.7
Publicación ActualizaciónCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.
- Actualiza a 3.0.3
Publicación ActualizaciónSQL Injection in nilsteampassnet/teampass
SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.
- Actualiza a 3.0.0.22
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.