github.com
https://github.com/francoisjacquet/rosariosis CVE-2023-2202
MEDIUM
Improper Access Control in francoisjacquet/rosariosis
Record summary
CVE-2023-2202 has a selected CVSS score of 6.5 (medium).
Description
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 4, 2025 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
francoisjacquet/rosariosisBrowse francoisjacquet / francoisjacquet/rosariosis | CVE List | Before 10.9.3 | affected |
francoisjacquet/rosariosisBrowse Packagist / francoisjacquet/rosariosis | GitHub Advisory | Before 10.9.3 · Fixed in 10.9.3 | affected |
References
5github.com
https://github.com/francoisjacquet/rosariosis/commit/6433946abfb34324616e833b1c00d0b2450753be github.com
https://github.com/francoisjacquet/rosariosis/compare/v10.9.2...v10.9.3 huntr.dev
https://huntr.dev/bounties/efe6ef47-d17c-4773-933a-4836c32db85c nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-2202