What is GHSA-2697-96mv-3gfm?

GHSA-2697-96mv-3gfm is a security advisory published by GitHub Security Advisories with Medium severity. TeamPass does not properly check whether a folder is in a user's allowed folders list

Which CVE IDs does GHSA-2697-96mv-3gfm cover?

GHSA-2697-96mv-3gfm covers the following CVE IDs: CVE-2024-50701. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2697-96mv-3gfm?

GHSA-2697-96mv-3gfm has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-2697-96mv-3gfm?

GHSA-2697-96mv-3gfm affects 1 product, including: composer/nilsteampassnet/teampass:\u003c 3.1.3.1.

GHSA-2697-96mv-3gfmMediumCVSS 4.3

TeamPass does not properly check whether a folder is in a user's allowed folders list

Vendor

GitHub Security Advisories

Published

December 30, 2024

Last Modified

December 30, 2024

🔗 CVE IDs covered (1)

CVE-2024-50701 →

📋 Description

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.

🎯 Affected products1

composer/nilsteampassnet/teampass:< 3.1.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-50701
https://github.com/nilsteampassnet/TeamPass/commit/ddbb2d3d94085dced50c4936fd2215af88e4a88d
https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1
https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1
https://github.com/advisories/GHSA-2697-96mv-3gfm