CVE-2023-0994
published 2023-02-24CVE-2023-0994: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
1.03%
59.6th percentile
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| francoisjacquet | francoisjacquet_rosariosis | >= unspecified < 10.8.2 | 10.8.2 |
| francoisjacquet | rosariosis | >= 0 < 10.8.2 | 10.8.2 |
| rosariosis | rosariosis | < 10.8.2 | 10.8.2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
RosarioSIS Improper Access Control vulnerability
osv·2023-02-24
CVE-2023-0994 [HIGH] RosarioSIS Improper Access Control vulnerability
RosarioSIS Improper Access Control vulnerability
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
GHSA
RosarioSIS Improper Access Control vulnerability
ghsa·2023-02-24
CVE-2023-0994 [HIGH] CWE-200 RosarioSIS Improper Access Control vulnerability
RosarioSIS Improper Access Control vulnerability
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45adhttps://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad
2023-02-24
Published