TeamPass Cross-site Scripting (XSS) vulnerability in nilsteampassnet/teampass
Summary
CVE-2019-16904: TeamPass Cross-site Scripting (XSS) vulnerability. Affects nilsteampassnet/teampass versions < 2.1.27.36. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TeamPass is a password management solution that allows users to securely store and share passwords within a team or organization. The nilsteampassnet/teampass package is a specific implementation of TeamPass. It provides features such as folder organization, item sharing, and change history tracking. However, this package is vulnerable to a Cross-site Scripting (XSS) attack.
Vulnerability Detail
The vulnerability in TeamPass 2.1.27.36 arises from the ability to set a crafted password for an item in a folder and share it with an admin. This crafted password can be exploited when viewing the change history or the previously used password field. An attacker can inject malicious scripts into the password field, which will be executed when viewed by an admin. This XSS vulnerability can lead to various security risks, including unauthorized access, data theft, and the potential for further exploitation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid sharing items with admins or restrict access to the change history and previous password fields. Additionally, implementing input validation and output encoding can help mitigate the risk of XSS attacks. Here is an example of input validation using PHP:
$input = $_POST['password'];
$cleanInput = htmlspecialchars($input, ENT_QUOTES, 'UTF-8');
This code snippet sanitizes the user input by converting special characters to their HTML entities, preventing the execution of malicious scripts.
Conclusion
The TeamPass nilsteampassnet/teampass package is vulnerable to a Cross-site Scripting (XSS) attack, allowing attackers to execute malicious scripts by setting a crafted password and sharing it with an admin. To fix this vulnerability, users should update to a secure version of the package once it becomes available. In the meantime, implementing input validation and output encoding can provide temporary mitigation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nilsteampassnet/teampass →
FAQ
The impact of this vulnerability can range from unauthorized access to sensitive information to potential data theft. Attackers can exploit the XSS vulnerability to execute malicious scripts, compromising the security of the TeamPass installation and potentially affecting the entire organization.
You can use the Vulert Playground at Vulert Scanner to check if your nilsteampassnet/teampass installation is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, providing valuable insights without requiring access to the code or installation.
At the time of this report, there are no known public exploits specifically targeting this vulnerability in TeamPass 2.1.27.36. However, it is crucial to address the vulnerability promptly to prevent any potential exploitation.
The GitHub Security Advisory database has reviewed and confirmed this vulnerability. The TeamPass development team should be aware of the issue and working on a fix. It is recommended to follow their official channels for updates and security patches.
The CVSS score of this vulnerability is 5.4, indicating a moderate severity level. It is important to address this vulnerability to mitigate the risk of potential exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for nilsteampassnet/teampass.
