CVE-2020-12479

HIGH

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

Affects 1 product across 1 vendor.

CVSS 3.18.8
EPSS2.6%
Percentile85th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-22: Path Traversal

Attacker manipulates file path inputs to access files outside the intended directory.

Related Attack Patterns (CAPEC)
CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
via CWE-22
CAPEC-76 Manipulating Web Input to File System Calls
via CWE-22
CAPEC-78 Using Escaped Slashes in Alternate Encoding
via CWE-22
CAPEC-79 Using Slashes in Alternate Encoding
via CWE-22
CAPEC-126 Path Traversal
via CWE-22

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

TeamPass 2.1.27.36 is vulnerable to a PHP file include vulnerability that can be exploited by any authenticated user through a crafted HTTP request, leading to potential remote code execution.

BSID: BS-2020-GLOBAL-185853-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2020-12479?
TeamPass 2.1.27.36 is vulnerable to a PHP file include vulnerability that can be exploited by any authenticated user through a crafted HTTP request, leading to potential remote code execution.
What is the CVSS score for CVE-2020-12479?
CVE-2020-12479 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 2.6%.
Is CVE-2020-12479 actively exploited?
No confirmed active exploitation of CVE-2020-12479 as of 2026-05-30.
How do I remediate CVE-2020-12479?
Priority: IMMEDIATE.
What systems are affected by CVE-2020-12479?
CVE-2020-12479 affects Teampass Teampass.
Vulnerability Details
CVE IDCVE-2020-12479
BSIDBS-2020-GLOBAL-185853-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2020-04-29
Last Modified2024-11-21
ICS Relevance15%
Weakness (CWE)
Path Traversal
SourceNVD
Official Description

TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability exists in the sources/users.queries.php file where the newValue parameter is not properly sanitized, allowing for directory traversal and inclusion of arbitrary PHP files.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Teampass Teampass 2.1.27.36
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2360 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash308d6d19879efee5a08552358b7e46b08166cadb7905ce698b68d307aa23adb6e6537b10ddce4599fff5a5cfa6751eb02a77dfc1d94c6ee06a83c6a16e9b0e9d
Related CVEs affecting Teampass
CVE-2015-7564 9.8 Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow r... CVE-2019-1000001 9.8 TeamPass version 2.1.27 and earlier contains a Storing Passwords in a Recover... CVE-2017-9436 9.8 TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php. CVE-2023-3086 9.0 Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/team... CVE-2015-7563 8.8 Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlie...
View all Teampass CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →