Syspass vulnerabilities
We track 1 vulnerability in Syspass products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 28, 2025.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Syspass vulnerabilities
- 8.1 High severity
Syspass: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.