CVE-2023-2665
1 advisory.
Packagist/francoisjacquet/rosariosis CVE-2023-2665: high 7.5
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Action: Upgrade francoisjacquet/rosariosis to 11.0 or later.
composer require francoisjacquet/rosariosis:11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0 | - |
Fixed versions
| 11.0 |
Sources
- osv: GHSA-36cm-h8gv-mg97
- https://nvd.nist.gov/vuln/detail/CVE-2023-2665
- https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
- https://github.com/francoisjacquet/rosariosis
- https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
CVE-2023-2665 · published · modified · JSON