CVE-2023-3190

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-116

Affected software

VendorProductVersions
nilsteampassnetnilsteampassnet/teampass>= unspecified, < 3.0.9

References

Timeline

Published
Jun 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-319029.8RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).CVE-2023-319039.8GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.CVE-2023-319047.5savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.CVE-2023-319067.8Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jCVE-2023-319077.8Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-CVE-2023-319087.8Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort.CVE-2023-31915.4Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.CVE-2023-319107.8Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerrCVE-2023-319135.5Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/jsCVE-2023-319145.5Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.CVE-2023-319165.5Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.CVE-2023-319185.5Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser
CVE-2023-3190: Medium severity, CVSS 4.6 | Vulnix