Vulnerability Details CVE-2017-15278
Cross-Site Scripting (XSS) was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data (in /sources/folders.queries.php). An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.2%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
- https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md
- https://github.com/nilsteampassnet/TeamPass/commit/f5a765381f051fe624386866ddb1f6b5e7eb929b
- https://github.com/nilsteampassnet/TeamPass/releases/tag/2.1.27.9
- https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md
- https://github.com/nilsteampassnet/TeamPass/commit/f5a765381f051fe624386866ddb1f6b5e7eb929b
- https://github.com/nilsteampassnet/TeamPass/releases/tag/2.1.27.9
Products affected by CVE-2017-15278
-
cpe:2.3:a:teampass:teampass:2.1
-
cpe:2.3:a:teampass:teampass:2.1.1
-
cpe:2.3:a:teampass:teampass:2.1.10
-
cpe:2.3:a:teampass:teampass:2.1.13
-
cpe:2.3:a:teampass:teampass:2.1.14
-
cpe:2.3:a:teampass:teampass:2.1.15
-
cpe:2.3:a:teampass:teampass:2.1.18
-
cpe:2.3:a:teampass:teampass:2.1.19
-
cpe:2.3:a:teampass:teampass:2.1.2
-
cpe:2.3:a:teampass:teampass:2.1.20
-
cpe:2.3:a:teampass:teampass:2.1.21
-
cpe:2.3:a:teampass:teampass:2.1.22
-
cpe:2.3:a:teampass:teampass:2.1.23.1
-
cpe:2.3:a:teampass:teampass:2.1.23.2
-
cpe:2.3:a:teampass:teampass:2.1.23.3
-
cpe:2.3:a:teampass:teampass:2.1.23.4
-
cpe:2.3:a:teampass:teampass:2.1.24.0
-
cpe:2.3:a:teampass:teampass:2.1.24.1
-
cpe:2.3:a:teampass:teampass:2.1.24.2
-
cpe:2.3:a:teampass:teampass:2.1.24.3
-
cpe:2.3:a:teampass:teampass:2.1.24.4
-
cpe:2.3:a:teampass:teampass:2.1.25.0
-
cpe:2.3:a:teampass:teampass:2.1.25.1
-
cpe:2.3:a:teampass:teampass:2.1.25.2
-
cpe:2.3:a:teampass:teampass:2.1.26
-
cpe:2.3:a:teampass:teampass:2.1.26.0
-
cpe:2.3:a:teampass:teampass:2.1.26.1
-
cpe:2.3:a:teampass:teampass:2.1.26.10
-
cpe:2.3:a:teampass:teampass:2.1.26.11
-
cpe:2.3:a:teampass:teampass:2.1.26.12
-
cpe:2.3:a:teampass:teampass:2.1.26.13
-
cpe:2.3:a:teampass:teampass:2.1.26.14
-
cpe:2.3:a:teampass:teampass:2.1.26.15
-
cpe:2.3:a:teampass:teampass:2.1.26.16
-
cpe:2.3:a:teampass:teampass:2.1.26.17
-
cpe:2.3:a:teampass:teampass:2.1.26.18
-
cpe:2.3:a:teampass:teampass:2.1.26.19
-
cpe:2.3:a:teampass:teampass:2.1.26.2
-
cpe:2.3:a:teampass:teampass:2.1.26.20
-
cpe:2.3:a:teampass:teampass:2.1.26.3
-
cpe:2.3:a:teampass:teampass:2.1.26.4
-
cpe:2.3:a:teampass:teampass:2.1.26.5
-
cpe:2.3:a:teampass:teampass:2.1.26.6
-
cpe:2.3:a:teampass:teampass:2.1.26.7
-
cpe:2.3:a:teampass:teampass:2.1.26.8
-
cpe:2.3:a:teampass:teampass:2.1.26.9
-
cpe:2.3:a:teampass:teampass:2.1.27.0
-
cpe:2.3:a:teampass:teampass:2.1.27.1
-
cpe:2.3:a:teampass:teampass:2.1.27.2
-
cpe:2.3:a:teampass:teampass:2.1.27.3
-
cpe:2.3:a:teampass:teampass:2.1.27.4
-
cpe:2.3:a:teampass:teampass:2.1.27.5
-
cpe:2.3:a:teampass:teampass:2.1.27.6
-
cpe:2.3:a:teampass:teampass:2.1.27.7
-
cpe:2.3:a:teampass:teampass:2.1.27.8
-
cpe:2.3:a:teampass:teampass:2.1.3
-
cpe:2.3:a:teampass:teampass:2.1.4
-
cpe:2.3:a:teampass:teampass:2.1.5