CVE-2019-12950

An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.

Score

CVSS 3.0 5.4 Medium

Status

Modified - cve@mitre.org

Published

2019-08-06

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Teampass (Teampass)

References

• https://github.com/nilsteampassnet/TeamPass/issues/2638
• https://github.com/nilsteampassnet/TeamPass/releases