Home > Vulnerability Database > CVE-2024-50702

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2024-50702

Date: December 29, 2024

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

Severity Score

5.4

Related Resources (6)

Url: https://github.com/nilsteampassnet/TeamPass

Url: https://github.com/nilsteampassnet/TeamPass/commit/35e2b479f2379545b4132bc30a9d052ba7018bf9

Url: https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1

Url: https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-50702

Url: https://www.mend.io/vulnerability-database/CVE-2024-50702

Severity Score

5.4

Weakness Type (CWE)

Improper Authorization

CWE-285

Incorrect Privilege Assignment

CWE-266

CVSS v3.1

Base Score:	5.4
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	NONE

Do you need more information?

Contact Us