CVE-2020-15717

概要

参考情報

• exchange.xforce.ibmcloud.com/vulnerabilities/184943 · VDB Entry
• gitlab.com/francoisjacquet/rosariosis/-/blob/mobile/CHANGES.md · Release Notes
• gitlab.com/francoisjacquet/rosariosis/-/commit/89ae9de732024e3a2e99262aa98b400a1aa6975a · Patch
• gitlab.com/francoisjacquet/rosariosis/-/issues/291 · Broken Link
• gitlab.com/francoisjacquet/rosariosis/-/tags/v6.8-beta · Third Party Advisory

rosariosis のその他の脆弱性

• CVE-2023-2665高 7.5Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
• CVE-2023-29918中 5.4RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
• CVE-2023-2202中 6.5Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
• CVE-2023-0994高 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
• CVE-2022-2714緊急 9.8Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.