CVE-2017-9436

CRITICAL

TeamPass < 2.1.27.4 - SQL Injection in users.queries.php

Title source: llm
STIX 2.1

Description

TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

References (1)

Core 1
Core References
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://github.com/nilsteampassnet/TeamPass/blob/master/changelog.md

Scores

CVSS v3 9.8
EPSS 0.0104
EPSS Percentile 60.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (40)
nilsteampassnet/teampass 0 - 2.1.27.5Packagist
teampass/teampass 2.1.20.0
teampass/teampass 2.1.22.0
teampass/teampass 2.1.23.1
teampass/teampass 2.1.23.2
teampass/teampass 2.1.23.3
teampass/teampass 2.1.23.4
teampass/teampass 2.1.24.0
teampass/teampass 2.1.24.1
teampass/teampass 2.1.24.2
... and 30 more
Published Jun 05, 2017
Tracked Since Feb 18, 2026