{"id":"CVE-2023-1545","aliases":["EUVD-2023-1072","GHSA-ppxm-q2h4-v7mm"],"status":"published","title":"SQL Injection in nilsteampassnet/teampass","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.08354,"percentile":0.94996,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-89"],"published":"2023-03-21T00:00:00Z","modified":"2026-10-28T02:30:24Z","exploits":[{"source":"exploitdb","id":"EDB-52094","title":"TeamPass 3.0.0.21 - SQL Injection","type":"webapps","platform":"php","date":"2025-03-22","url":"https://www.exploit-db.com/exploits/52094"},{"source":"pocgithub","id":"HarshRajSinghania/CVE-2023-1545-Exploit","title":"HarshRajSinghania/CVE-2023-1545-Exploit","date":"2025-02-22","url":"https://github.com/HarshRajSinghania/CVE-2023-1545-Exploit"},{"source":"pocgithub","id":"gunzf0x/CVE-2023-1545","title":"gunzf0x/CVE-2023-1545","date":"2025-04-25","url":"https://github.com/gunzf0x/CVE-2023-1545"},{"source":"pocgithub","id":"sternstundes/CVE-2023-1545-POC-python","title":"sternstundes/CVE-2023-1545-POC-python","date":"2025-03-01","url":"https://github.com/sternstundes/CVE-2023-1545-POC-python"},{"source":"pocgithub","id":"zer0-dave/CVE-2023-1545-POC","title":"zer0-dave/CVE-2023-1545-POC","date":"2025-02-24","url":"https://github.com/zer0-dave/CVE-2023-1545-POC"}],"fixes":[{"ecosystem":"Packagist","package":"nilsteampassnet/teampass","fixed_in":["3.0.0.22"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Packagist","package":"nilsteampassnet/teampass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0.22"}]}]},{"source":"osv","ecosystem":"Packagist","package":"nilsteampassnet/teampass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0.22"}]}],"versions":["2.1.21","2.1.26","2.1.27","3.0.0","3.0.0.10","3.0.0.11"]}],"products":[{"vendor":"nilsteampassnet","product":"nilsteampassnet/teampass"},{"vendor":"teampass","product":"teampass"}],"references":[{"url":"https://huntr.dev/bounties/942c015f-7486-49b1-94ae-b1538d812bc2","tags":["x_transferred","Exploit","Patch","Third Party Advisory","web"]},{"url":"https://github.com/nilsteampassnet/teampass/commit/4780252fdb600ef2ec2758f17a37d738570cbe66","tags":["x_transferred","Patch","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1545","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-ppxm-q2h4-v7mm"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1545.json","tags":["advisory"]},{"url":"https://github.com/nilsteampassnet/teampass","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-1545","title":" SQL Injection in nilsteampassnet/teampass","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T18:32:30.066Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-1072","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.","status":"published","published":"2023-03-21T00:00:00Z","modified":"2025-02-26T18:32:30Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T20:53:22.849013Z"}],"ghsa":[{"id":"GHSA-ppxm-q2h4-v7mm","title":"Teampass SQL Injection vulnerability","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.","status":"published","published":"2023-03-21T12:30:15Z","modified":"2023-03-24T17:12:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:36:48.905887Z"}],"nvd":[{"id":"CVE-2023-1545","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.","status":"published","published":"2023-03-21T11:15:10.453Z","modified":"2026-06-17T05:28:13.657Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:07:49.031498Z"}],"osv":[{"id":"CVE-2023-1545","title":" SQL Injection in nilsteampassnet/teampass","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.","status":"published","published":"2023-03-21T00:00:00Z","modified":"2026-10-28T02:30:24.728445844Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:44:29.487253Z"},{"id":"GHSA-ppxm-q2h4-v7mm","title":"Teampass SQL Injection vulnerability","description":"SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.","status":"published","published":"2023-03-21T12:30:15Z","modified":"2023-11-08T04:11:17.97741Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:46:53.244788Z"}]}}