RosarioSIS vulnerable to CSV Injection

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-29918 · ADVISORY
• docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit · WEB
• francoisjacquet/rosariosis · PACKAGE

Mais vulnerabilidades de francoisjacquet/rosariosis

• CVE-2024-3138BAIXO 3.5** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unk…
• CVE-2023-2665ALTO 7.5Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
• CVE-2023-2202MÉDIO 6.5Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
• CVE-2023-0994ALTO 7.5Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
• CVE-2022-2714CRÍTICO 9.8Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.