Packagist/francoisjacquet/rosariosis CVE-2023-2665: high 7.5, EPSS 0.61%

RosarioSIS Stores Sensitive Data in a Mechanism without Access Control

Action: Upgrade francoisjacquet/rosariosis to 11.0 or later.

composer require francoisjacquet/rosariosis:11.0

Affected

Fixed versions

Sources

• osv: GHSA-36cm-h8gv-mg97
• https://nvd.nist.gov/vuln/detail/CVE-2023-2665
• https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
• https://github.com/francoisjacquet/rosariosis
• https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194

CVE-2023-2665 · published 2023-05-19T18:30:25Z · modified 2024-02-16T07:46:23.411209Z · JSON