PatchTheCVEteampass vulnerabilities and fixes
Recent CVEs affecting teampass, with upgrade or downgrade steps. 3 tracked.
teampass has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-12-30. Highest priority: CVE-2024-50703 (score 29/100).
- CVE-2024-50703 MEDIUM 5.4 UPGRADE TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_i
- CVE-2024-50702 MEDIUM 5.4 UPGRADE TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of
- CVE-2024-50701 MEDIUM 4.3 UPGRADE TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check
FAQ
How do I fix teampass vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is teampass being exploited right now?
None of the tracked teampass CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which teampass CVE should I patch first?
CVE-2024-50703 currently ranks highest (29/100): TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_i.