Skip to content
OpenAdvisories
High · 7.1 CVE-2023-1070 EUVD-2023-0816GHSA-x36g-4629-xp9v

External Control of File Name or Path in nilsteampassnet/teampass

Published Feb 27, 2023 · Updated Mar 10, 2025 · Assigned by @huntrdev

Vendor: nilsteampassnet Product: nilsteampassnet/teampass Package: nilsteampassnet/teampass Ecosystem: Packagist

Description

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

Affected products

VendorProductAffectedFixed
nilsteampassnet nilsteampassnet/teampass unspecified – < 3.0.0.22 3.0.0.22

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist nilsteampassnet/teampass < 3.0.0.23 3.0.0.23 GHSA-x36g-4629-xp9v

References