CVE-2023-3553 (HTML, published 2023-07-08T09:15Z)
Description: value: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository nilsteampassnet/teampass prior to 3.0.10.
Severity: nan (CVSS v3 base score: 7.5)
Weakness: CWE-200 \u2014 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Repository: https://github.com/nilsteampassnet/teampass
Files changed:
api/Controller/index.html
api/Model/index.html
api/inc/index.html
includes/config/index.html
includes/index.html
pages/index.html
plugins/index.html
scripts/index.html
sources/index.html
Commit message: 3.0.10

Fix directory listing


Vulnerable code:

Fixed code:
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>Teampass Incorrect Path</title>
    <style>
        body {
            font-family: Arial, sans-serif;
            text-align: center;
            padding: 50px;
        }
        
        h1 {
            color: #FF0000;
        }
    </style>
</head>
<body>
    <h1>Teampass Incorrect Path</h1>
    <p>Sorry, but it seems that you are trying to access an incorrect path.</p>
    <p>Please verify the URL or contact the website administrator for assistance.</p>
</body>
</html>