{"action":"Upgrade francoisjacquet/rosariosis to 11.0 or later.","affected":[{"fixed":"11.0","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2023-2665"],"ecosystem":"Packagist","epss":0.00613,"exploited":false,"fixed_versions":["11.0"],"ghsa_id":"GHSA-36cm-h8gv-mg97","id":"tcs_01M5KESNWVY2H25RF1RG2V12E4","modified_at":"2024-02-16T07:46:23.411209Z","published_at":"2023-05-19T18:30:25Z","references":["https://osv.dev/vulnerability/GHSA-36cm-h8gv-mg97","https://nvd.nist.gov/vuln/detail/CVE-2023-2665","https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986","https://github.com/francoisjacquet/rosariosis","https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-36cm-h8gv-mg97","url":"https://osv.dev/vulnerability/GHSA-36cm-h8gv-mg97"}],"summary":"RosarioSIS Stores Sensitive Data in a Mechanism without Access Control"}