CVE-2024-50702

Description

TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.

PUBLISHED Reserved 2024-10-28 | Published 2024-12-30 | Updated 2024-12-30 | Assigner mitre

Problem types

CWE-266 Incorrect Privilege Assignment

Product status

References

github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1

github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1

github.com/...ommit/35e2b479f2379545b4132bc30a9d052ba7018bf9

cve.org (CVE-2024-50702)

nvd.nist.gov (CVE-2024-50702)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.