Unrated
TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.qu...
CVE-2020-12479
First seen on SecPulse
Original description The description as published by the source.
TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report github.com