{"id":"GHSA-cm26-gp8j-w6xf","aliases":["CVE-2017-9436"],"title":"TeamPass SQL injection in users.queries.php","description":"TeamPass before 2.1.27.5 is vulnerable to a SQL injection in users.queries.php.","severity":"critical","score":9.8,"published":"2022-05-17T02:41:29.000Z","modified":"2024-04-24T22:43:39.729Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"nilsteampassnet/teampass","ranges":[{"events":[{"introduced":"0"},{"fixed":"2.1.27.5"}],"type":"ECOSYSTEM"}],"versions":["2.1.21","2.1.26","2.1.27"],"fixed":["2.1.27.5"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-9436","https://github.com/nilsteampassnet/TeamPass","https://github.com/nilsteampassnet/TeamPass/blob/2.1.27.5/changelog.md"],"sources":[{"name":"OSV","id":"GHSA-cm26-gp8j-w6xf","modified":"2024-04-24T22:43:39.729273Z","url":"https://osv.dev/vulnerability/GHSA-cm26-gp8j-w6xf"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}]}