{"action":"Upgrade francoisjacquet/rosariosis to 10.9.3 or later.","affected":[{"fixed":"10.9.3","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2023-2202"],"ecosystem":"Packagist","epss":0.00538,"exploited":false,"fixed_versions":["10.9.3"],"ghsa_id":"GHSA-g66v-3v62-g375","id":"tcs_01M5KF2CT7BQXBXDBHP5PRTGNX","modified_at":"2024-02-16T08:19:04.115508Z","published_at":"2023-04-21T03:30:36Z","references":["https://osv.dev/vulnerability/GHSA-g66v-3v62-g375","https://nvd.nist.gov/vuln/detail/CVE-2023-2202","https://github.com/francoisjacquet/rosariosis/commit/6433946abfb34324616e833b1c00d0b2450753be","https://github.com/francoisjacquet/rosariosis","https://github.com/francoisjacquet/rosariosis/compare/v10.9.2...v10.9.3","https://huntr.dev/bounties/efe6ef47-d17c-4773-933a-4836c32db85c"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-g66v-3v62-g375","url":"https://osv.dev/vulnerability/GHSA-g66v-3v62-g375"}],"summary":"RosarioSIS improper access control vulnerability"}