← voltar
CVE-2024-50702

CVE-2024-50702

CVSS 5.4 MEDIUMEPSS 0.3%CWE-266
TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
TeamPass · TeamPass

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/nilsteampassnet/TeamPass/commit/35e2b479f2379545b4132bc30a9d052ba7018bf9https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1