francoisjacquet Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with francoisjacquet products.
Products
- francoisjacquet/rosariosis8 vulnerabilities
- RosarioSIS1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
francoisjacquet RosarioSIS Add Portal Note cross site scripting** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unknown processing of the component Add Portal Note. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated identifier of this vulnerability is VDB-258911. NOTE: The vendor explains … CWE-79Apr 1, 2024 | CVSS3.5v3.1 | EPSS0.47% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2023-2665HIGH | Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosisStorage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0. | CVSS7.5v3.1 | EPSS0.613% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-2202MEDIUM | Improper Access Control in francoisjacquet/rosariosisImproper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3. CWE-284Apr 21, 2023 | CVSS6.5v3.1 | EPSS0.538% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0994HIGH | Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosisExposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2. | CVSS7.5v3.1 | EPSS1.04% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2714CRITICAL | Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosisImproper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. CWE-130Sep 6, 2022 | CVSS9.8v3.1 | EPSS0.781% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3072MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3. CWE-79Sep 1, 2022 | CVSS5.4v3.1 | EPSS0.783% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2067CRITICAL | SQL Injection in francoisjacquet/rosariosisSQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0. CWE-89Jun 13, 2022 | CVSS9.1v3.1 | EPSS1.91% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2036MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1. CWE-79Jun 9, 2022 | CVSS5.4v3.1 | EPSS0.863% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-1997MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0. CWE-79Jun 6, 2022 | CVSS5.4v3.1 | EPSS0.657% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |