CVE-2023-1545

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
nilsteampassnet	nilsteampassnet/teampass	>= unspecified, < 3.0.0.23

References

https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66Patch
https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2Exploit, Patch, Third Party Advisory
https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66Patch
https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2Exploit, Patch, Third Party Advisory

Timeline

Published: Mar 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-15466.1The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cros CVE-2023-15479.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection th CVE-2023-15485.5A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the conso CVE-2023-15497.2The Ad Inserter WordPress plugin before 2.7.27 unserializes user input provided via the settings, which could allow high privilege users suc CVE-2023-15505.5Insertion of Sensitive Information into log file vulnerability in NGINX Agent. NGINX Agent version 2.0 before 2.23.3 inserts sensitive infor CVE-2023-15527.8ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted CVE-2023-15544.8The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privile CVE-2023-15554.3An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.CVE-2023-15569.8A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability CVE-2023-15579.8A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown fun CVE-2023-15589.8A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the CVE-2023-15597.2A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects