GitHub Advisoryadvisory · Packagist

GHSA-86jq-pwgx-6vrq Improper Authorization in nilsteampassnet/teampass

MEDIUM Published 2023-03-17 Modified 2023-03-23 Official page ↗
Aliases
CVE-2023-1463
Ecosystem
Packagist
Packages
nilsteampassnet/teampass
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-285, CWE-639
Reviewed
2023-03-17

Affected packages

• Packagist nilsteampassnet/teampass: < 3.0.0.23 → fixed in 3.0.0.23

Description

Improper Authorization in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

Related

Alias · CVE (1)

  • CVE-2023-1463 Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. vulnerability

Weakness · CWE (2)

  • CWE-285 Improper Authorization weakness
  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References