CVE-2023-3552

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Improper Encoding or Escaping of Output in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-116

Affected software

Vendor	Product	Versions
nilsteampassnet	nilsteampassnet/teampass	>= unspecified, < 3.0.10
teampass	teampass	< 3.0.10

References

https://github.com/nilsteampassnet/teampass/commit/8acb4dacc2d008a4186a4e13cc143e978f113955Patch
https://huntr.dev/bounties/aeb2f43f-0602-4ac6-9685-273e87ff4dedExploit, Patch, Third Party Advisory
https://github.com/nilsteampassnet/teampass/commit/8acb4dacc2d008a4186a4e13cc143e978f113955Patch
https://huntr.dev/bounties/aeb2f43f-0602-4ac6-9685-273e87ff4dedExploit, Patch, Third Party Advisory

Timeline

Published: Jul 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-35537.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.CVE-2023-35546.1A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is some unknown functional CVE-2023-35556.1A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part CVE-2023-35566.1A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown CVE-2023-35576.1A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown proce CVE-2023-35585.4A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the fi CVE-2023-35596.1A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability i CVE-2023-35606.1A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some CVE-2023-35616.1A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part CVE-2023-356189.6Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2023-356195.3Microsoft Outlook for Mac Spoofing Vulnerability CVE-2023-35626.1A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of