CVE-2023-3084

HIGH
Published Jun 3, 20233y ago · Modified Jun 17, 20262w ago
8.1 CVSS 3.1
High
Find Similar
Published Jun 3, 2023 3y ago
Last Modified Jun 17, 2026 2w ago

Description

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

CVSS Details

Base Score
8.1
Exploitability
2.8
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability None

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
teampassteampass* <3.0.9

References 2

  • github.com https://github.com/nilsteampassnet/teampass/commit/61b9b7d4e33bbaad2cd61a7ee988f9c22298bf1a
    Patch
  • huntr.dev https://huntr.dev/bounties/4b86b56b-c51b-4be8-8ee4-6e385d1e9e8a
    ExploitPatchThird Party Advisory

Remediation

  • github.com https://github.com/nilsteampassnet/teampass/commit/61b9b7d4e33bbaad2cd61a7ee988f9c22298bf1a
    Patch
  • huntr.dev https://huntr.dev/bounties/4b86b56b-c51b-4be8-8ee4-6e385d1e9e8a
    ExploitPatchThird Party Advisory