CVE-2023-3551

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
nilsteampassnet	nilsteampassnet/teampass	>= unspecified, < 3.0.10
teampass	teampass	< 3.0.10

References

https://github.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6fPatch
https://huntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7Exploit, Patch, Third Party Advisory
https://github.com/nilsteampassnet/teampass/commit/cc6abc76aa46ed4a27736c1d2f21e432a5d54e6fPatch
https://huntr.dev/bounties/cf8878ff-6cd9-49be-b313-7ac2a94fc7f7Exploit, Patch, Third Party Advisory

Timeline

Published: Jul 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-35525.4Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.CVE-2023-35537.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.CVE-2023-35546.1A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is some unknown functional CVE-2023-35556.1A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part CVE-2023-35566.1A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown CVE-2023-35576.1A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown proce CVE-2023-35585.4A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the fi CVE-2023-35596.1A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability i CVE-2023-35606.1A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some CVE-2023-35616.1A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part CVE-2023-356189.6Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2023-356195.3Microsoft Outlook for Mac Spoofing Vulnerability