What is GHSA-9wmc-988h-2mv2?

GHSA-9wmc-988h-2mv2 is a security advisory published by GitHub Security Advisories with Critical severity. TeamPass privileges issue

Which CVE IDs does GHSA-9wmc-988h-2mv2 cover?

GHSA-9wmc-988h-2mv2 covers the following CVE IDs: CVE-2024-50703. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9wmc-988h-2mv2?

GHSA-9wmc-988h-2mv2 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-9wmc-988h-2mv2?

GHSA-9wmc-988h-2mv2 affects 1 product, including: composer/nilsteampassnet/teampass:\u003c 3.1.3.1.

GHSA-9wmc-988h-2mv2CriticalCVSS 5.4

TeamPass privileges issue

Vendor

GitHub Security Advisories

Published

December 30, 2024

Last Modified

December 30, 2024

🔗 CVE IDs covered (1)

CVE-2024-50703 →

📋 Description

TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.

🎯 Affected products1

composer/nilsteampassnet/teampass:< 3.1.3.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-50703
https://github.com/nilsteampassnet/TeamPass/commit/c7f7f809071eaa9e04505ee79cec7049a42959e9
https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1
https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1
https://github.com/advisories/GHSA-9wmc-988h-2mv2