Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-2859. PoCs published by mnqazi.
AI-analyzed exploit summary The repository describes a stored HTML injection vulnerability in TeamPass < 3.0.9, where malicious HTML code can be injected into the FolderName field, potentially leading to data theft or redirect attacks when an administrator interacts with the compromised folder.
Description
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
Exploits (1)
The repository describes a stored HTML injection vulnerability in TeamPass < 3.0.9, where malicious HTML code can be injected into the FolderName field, potentially leading to data theft or redirect attacks when an administrator interacts with the compromised folder.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H