github.com
https://github.com/francoisjacquet/rosariosis CVE-2023-0994
HIGH
Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
Record summary
CVE-2023-0994 has a selected CVSS score of 7.5 (high).
Description
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 12, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
francoisjacquet/rosariosisBrowse francoisjacquet / francoisjacquet/rosariosis | CVE List | Before 10.8.2 | affected |
francoisjacquet/rosariosisBrowse Packagist / francoisjacquet/rosariosis | GitHub Advisory | Before 10.8.2 · Fixed in 10.8.2 | affected |
References
4github.com
https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76 huntr.dev
https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-0994