RosarioSIS Improper Access Control vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-0994 · ADVISORY
• francoisjacquet/rosariosis commit 630d3e3 · WEB
• francoisjacquet/rosariosis · PACKAGE
• huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad · WEB

Weitere Schwachstellen in francoisjacquet/rosariosis

• CVE-2024-3138NIEDRIG 3.5** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unk…
• CVE-2023-2665HOCH 7.5Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
• CVE-2023-29918MITTEL 5.4RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
• CVE-2023-2202MITTEL 6.5Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
• CVE-2022-2714KRITISCH 9.8Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.