CVE-2023-3553: Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)
value: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
CWE description: The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVSS v3 base score: 7.5
Published: 2023-07-08T09:15Z
Repository: https://github.com/nilsteampassnet/teampass
Language: HTML
Files changed: api/Controller/index.html, api/Model/index.html, api/inc/index.html, includes/config/index.html, includes/index.html, pages/index.html, plugins/index.html, scripts/index.html, sources/index.html
Commit date: 2023-07-08 10:32:15 +0200
Commit message: 3.0.10

Fix directory listing

Diff: diff --git a/api/Controller/index.html b/api/Controller/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/api/Controller/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/api/Model/index.html b/api/Model/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/api/Model/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/api/inc/index.html b/api/inc/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/api/inc/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/includes/config/index.html b/includes/config/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/includes/config/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/includes/index.html b/includes/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/includes/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/pages/index.html b/pages/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/pages/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/plugins/index.html b/plugins/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/plugins/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/scripts/index.html b/scripts/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/scripts/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file
diff --git a/sources/index.html b/sources/index.html
new file mode 100644
index 0000000000..c98b5bd8b2
--- /dev/null
+++ b/sources/index.html
@@ -0,0 +1,23 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <meta charset="UTF-8">
+    <title>Teampass Incorrect Path</title>
+    <style>
+        body {
+            font-family: Arial, sans-serif;
+            text-align: center;
+            padding: 50px;
+        }
+        
+        h1 {
+            color: #FF0000;
+        }
+    </style>
+</head>
+<body>
+    <h1>Teampass Incorrect Path</h1>
+    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
+    <p>Please verify the URL or contact the website administrator for assistance.</p>
+</body>
+</html>
\ No newline at end of file

Fixed code: <!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>