CVE-2024-50701

Description

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.

Reserved 2024-10-28 | Published 2024-12-30 | Updated 2024-12-30 | Assigner mitre

Problem types

CWE-266 Incorrect Privilege Assignment

Product status

Default status
unaffected

Any version before 3.1.3.1
affected

References

github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1

github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1

github.com/...ommit/ddbb2d3d94085dced50c4936fd2215af88e4a88d

cve.org (CVE-2024-50701)

nvd.nist.gov (CVE-2024-50701)

Download JSON