CVE-2023-2021

MEDIUM5.8EPSS 0.26%

nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)

發布日:2023/4/13修改日:2023/11/8
也稱為:GHSA-4h2q-84w7-4mhx

描述

nilsteampassnet/teampass prior to 3.0.3 is vulnerable to stored cross-site scripting (XSS) in the description parameter of a folder.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM5.8CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

參考連結(4)