TeamPass 跨站脚本漏洞(CVE-2023-3083)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-3083
• https://cve.imfht.com/detail/CVE-2023-3083
• https://avd.aliyun.com/product?prod=teampass
• https://security.snyk.io/vuln/SNYK-PHP-NILSTEAMPASSNETTEAMPASS-5665464
• https://www.miggo.io/vulnerability-database/cve/CVE-2023-3083
• https://www.redpacketsecurity.com/teampass-cross-site-scripting-cve-2023-3083/
• https://security-tracker.debian.org/tracker/CVE-2023-3083
• https://www.tenable.com/cve/CVE-2023-3083
• https://huntr.com/bounties/c6b29e46-02e0-43ad-920f-28ac482ea2ab
• https://github.com/advisories/GHSA-2cv5-qvq3-6276

Related Vulnerabilities

• PoCCVE-2020-12478: TeamPass 2.1.27.36 - Improper Authentication
• PoCteampass-ldap: Teampass LDAP Debug Config - Detect
• Teampass 信息泄露(CVE-2023-3553)
• TeamPass 跨站脚本漏洞(CVE-2023-3084)
• TeamPass 2.1.27.36 -未授权访问(CVE-2020-12478)