RosarioSIS Improper Access Control vulnerability

HIGH 7.5CVE-2023-0994 · GHSA-prjg-28jg-m3p5 · Published 24/02/2023 · updated 17/06/2026

In short

CVE-2023-0994 is a HIGH (CVSS 7.5) vulnerability affecting francoisjacquet/rosariosis, rosariosis (rosariosis).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
Fix: update to 10.8.2 or later.

Package	Affected versions	Patched versions
francoisjacquet/rosariosis Packagist	`< 10.8.2`	`10.8.2`
rosariosis rosariosis	`< 10.8.2`	`10.8.2`

Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.

NVD description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 10.8.2

10.8.2

< 10.8.2

10.8.2

More vulnerabilities in francoisjacquet/rosariosis

See all →