← All advisories

High severityNVD Advisory· Published May 24, 2023· Updated Feb 12, 2025

Code Injection in nilsteampassnet/teampass

CVE-2023-2859

Description

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
nilsteampassnet/teampassPackagist	< 3.0.9	3.0.9

Affected products

9

ghsa-coords8 versions
pkg:composer/nilsteampassnet/teampass pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/wireshark&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP4 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/wireshark&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3
< 3.0.9+ 7 more
- (no CPE)range: < 3.0.9
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
- (no CPE)range: < 3.6.14-150000.3.92.1
Nilsteampassnet/Nilsteampassnet/teampassv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-h6jh-cf83-qcq5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-2859ghsaADVISORY
github.com/nilsteampassnet/teampass/commit/1f51482a0c4d152ca876844212b0f8f3cb9387afghsaWEB
huntr.dev/bounties/d7b8ea75-c74a-4721-89bb-12e5c80fb0baghsaWEB

News mentions

0

No linked articles in our index yet.