TeamPass Stored Cross-Site Scripting (XSS) Vulnerability in nilsteampassnet/teampass
Summary
CVE-2017-15051: TeamPass stored cross-site scripting (XSS) vulnerability. Affects nilsteampassnet/teampass versions < 2.1.27.9. Fixed in 2.1.27.9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeamPass is an open-source password manager that allows users to securely store and share passwords within a team. It provides a web-based interface for managing passwords and access control. The vulnerability affects the nilsteampassnet/teampass package, specifically versions prior to 2.1.27.9. This vulnerability allows authenticated remote attackers to inject arbitrary web script or HTML through the URL value of an item or user log history.
Vulnerability Detail
The vulnerability in TeamPass arises from multiple stored cross-site scripting (XSS) vulnerabilities. These vulnerabilities enable authenticated remote attackers to inject malicious web script or HTML code. The first vulnerability involves injecting XSS code within the URL field of a shared item. The second vulnerability requires the attacker to prepare a payload within their profile and then convince an administrator to modify their profile. Once the administrator accesses the log, the XSS payload is triggered. The impact of these vulnerabilities can range from unauthorized access to sensitive information to the execution of arbitrary code within the context of the affected user's session.
How To Fix
Minimum fixed version
2.1.27.9
This is the first release that contains the fix.
composer require nilsteampassnet/teampass:2.1.27.9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the provided fix by upgrading to the patched version of the nilsteampassnet/teampass package.
Conclusion
The TeamPass stored cross-site scripting (XSS) vulnerability in the nilsteampassnet/teampass package allows authenticated remote attackers to inject malicious web script or HTML. Upgrading to version 2.1.27.9 or later of the package is recommended to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
The impact of this vulnerability can range from unauthorized access to sensitive information to the execution of arbitrary code within the context of the affected user's session.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just the composer.lock file.
Yes, the attacker must be authenticated to the TeamPass application to exploit this vulnerability.
The CVSS score of this vulnerability is 5.4, indicating a moderate severity level.
There are no known workarounds for this vulnerability. It is crucial to apply the provided fix by upgrading to the patched version of the nilsteampassnet/teampass package.
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
