francoisjacquet Vulnerabilities and Affected Products
Vulnerabilities associated with francoisjacquet/rosariosis.
Products
Clear product- francoisjacquet/rosariosis8 vulnerabilities
- RosarioSIS1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-2665HIGH | Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosisStorage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0. | CVSS7.5v3.1 | EPSS0.613% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-2202MEDIUM | Improper Access Control in francoisjacquet/rosariosisImproper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3. CWE-284Apr 21, 2023 | CVSS6.5v3.1 | EPSS0.538% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-0994HIGH | Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosisExposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2. | CVSS7.5v3.1 | EPSS1.04% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2714CRITICAL | Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosisImproper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. CWE-130Sep 6, 2022 | CVSS9.8v3.1 | EPSS0.781% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3072MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3. CWE-79Sep 1, 2022 | CVSS5.4v3.1 | EPSS0.783% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2067CRITICAL | SQL Injection in francoisjacquet/rosariosisSQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0. CWE-89Jun 13, 2022 | CVSS9.1v3.1 | EPSS1.91% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-2036MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1. CWE-79Jun 9, 2022 | CVSS5.4v3.1 | EPSS0.863% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-1997MEDIUM | Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosisCross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0. CWE-79Jun 6, 2022 | CVSS5.4v3.1 | EPSS0.657% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |