CVE-2023-3531: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

July 6, 2023 (updated July 11, 2023)

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.10.

References

github.com/nilsteampassnet/teampass/commit/cb8ea5ccca61653895bb6881547e463baa50293d
huntr.dev/bounties/c9f0b3ff-bbc4-4ea1-a59e-8594b48bb414
nvd.nist.gov/vuln/detail/CVE-2023-3531

Detect and mitigate CVE-2023-3531 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →