Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-1463 EUVD-2023-0940GHSA-86jq-pwgx-6vrq

Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

Published Mar 17, 2023 · Updated Feb 26, 2025 · Assigned by @huntrdev

Vendor: nilsteampassnet Product: nilsteampassnet/teampass Package: nilsteampassnet/teampass Ecosystem: Packagist

Description

Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

Affected products

VendorProductAffectedFixed
nilsteampassnet nilsteampassnet/teampass unspecified – < 3.0.0.23 3.0.0.23

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist nilsteampassnet/teampass < 3.0.0.23 3.0.0.23 GHSA-86jq-pwgx-6vrq

References