CVE-2015-7564: TeamPass SQL Injection Vulnerability
Summary
CVE-2015-7564: TeamPass vulnerable to SQL Injection. Affects nilsteampassnet/teampass versions < 2.1.25. Fixed in 2.1.25. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeamPass is an open-source password management tool designed for teams to securely store and share passwords. It offers features such as user management, password sharing, and access control. However, versions 2.1.24 and earlier are vulnerable to SQL injection attacks, which can compromise the integrity and confidentiality of the stored data.
Vulnerability Detail
Multiple SQL injection vulnerabilities exist in TeamPass versions 2.1.24 and earlier. These vulnerabilities allow remote attackers to execute arbitrary SQL commands through manipulated parameters in specific actions. The affected parameters include 'id' in item.query.php and 'order' or 'direction' in view.query.php for various log actions. Exploiting these vulnerabilities can lead to unauthorized access to sensitive data, data manipulation, or complete system compromise.
How To Fix
Minimum fixed version
2.1.25
This is the first release that contains the fix.
composer require nilsteampassnet/teampass:2.1.25Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If an immediate update is not feasible, consider restricting access to the affected scripts (item.query.php and view.query.php) through server configuration or firewall rules to limit exposure to potential attackers.
Conclusion
The SQL injection vulnerabilities in TeamPass versions 2.1.24 and earlier pose significant risks to data security. It is crucial for users to update to version 2.1.25 or later to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain the security of open-source applications.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
SQL injection is a code injection technique that exploits vulnerabilities in an application's software by injecting malicious SQL statements into an entry field for execution.
If you are using TeamPass version 2.1.24 or earlier, your installation is vulnerable. You can check your version in the application settings or by reviewing the composer.lock file.
Successful SQL injection attacks can lead to unauthorized access to sensitive data, data corruption, or complete control over the database and application server.
Yes, you can use Vulert, which monitors and alerts in real-time for open-source vulnerabilities using just the composer.lock file. You can also check your application against known vulnerabilities using the Vulert playground.
The CVSS score for this vulnerability is 9.8, indicating a critical level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
