Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2023-1070

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.

VectorNETWORK

PublishedFeb 27, 2023, 16:15

Published Bysecurity@huntr.dev

Base Score

Score7.1

Package (Ecosystem)IntroducedFixedLimit

nilsteampassnet/teampass(Packagist)03.0.0.23N/A

CWE-73

Base Score

7.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK