CVE-2023-2202 — Improper Access Control in Rosariosis

CWE-284 — Improper Access Control3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 73.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Francoisjacquet RosariosisRosariosisFrancoisjacquet Rosariosis
Timeline
PublishedApr 21

Description

Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶Packagistfrancoisjacquet/rosariosis< 10.9.3
▶CVEListV5francoisjacquet/francoisjacquet_rosariosisunspecified — 10.9.3
▶NVDrosariosis/rosariosis< 10.9.3

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

2
OSV
RosarioSIS improper access control vulnerability↗2023-04-21
▶
GHSA
RosarioSIS improper access control vulnerability↗2023-04-21
▶