TeamPass 跨站脚本漏洞(CVE-2023-3084)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-3084
• https://cve.imfht.com/detail/CVE-2023-3084
• https://github.com/advisories/GHSA-8vm8-38pc-8xhh
• https://cve.imfht.com/detail/CVE-2023-3084?lang=en
• https://avd.aliyun.com/product?prod=teampass
• https://huntr.com/bounties/4b86b56b-c51b-4be8-8ee4-6e385d1e9e8a
• https://security.snyk.io/vuln/SNYK-PHP-NILSTEAMPASSNETTEAMPASS-5596907
• https://opencve.io/cve/CVE-2023-3084
• https://vigilance.fr/vulnerability/TeamPass-Cross-Site-Scripting-via-Item-Name-41384
• https://pentest-tools.com/vulnerabilities-exploits/teampass-309-multiple-vulnerabilities_19045

Related Vulnerabilities

• PoCCVE-2020-12478: TeamPass 2.1.27.36 - Improper Authentication
• PoCteampass-ldap: Teampass LDAP Debug Config - Detect
• Teampass 信息泄露(CVE-2023-3553)
• TeamPass 跨站脚本漏洞(CVE-2023-3083)
• TeamPass 2.1.27.36 -未授权访问(CVE-2020-12478)