{"action":"Upgrade francoisjacquet/rosariosis to 10.8.2 or later.","affected":[{"fixed":"10.8.2","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2023-0994"],"ecosystem":"Packagist","epss":0.01035,"exploited":false,"fixed_versions":["10.8.2"],"ghsa_id":"GHSA-prjg-28jg-m3p5","id":"tcs_01M5KF6NBMVYR2GRPKB72PX6ZQ","modified_at":"2023-11-08T04:11:13.550360Z","published_at":"2023-02-24T03:30:14Z","references":["https://osv.dev/vulnerability/GHSA-prjg-28jg-m3p5","https://nvd.nist.gov/vuln/detail/CVE-2023-0994","https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76","https://github.com/francoisjacquet/rosariosis","https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-prjg-28jg-m3p5","url":"https://osv.dev/vulnerability/GHSA-prjg-28jg-m3p5"}],"summary":"RosarioSIS Improper Access Control vulnerability"}