CVE-2020-12479

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php…

published April 29, 2020

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02575 · 85.1th percentile
Published
2020-04-29T21:49Z
EPSS history
Timeline
  • 29 APR 21:49Z
    TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php…
    cvelistv5