CVE-2023-2665

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

CVE-2023-2665

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0...

CVE-2023-2665

CVE-2023-2665 affects RosarioSIS prior to version 11.0, where the salaries module stores attachments without access control, enabling unauthorized users to download/view sensitive salary data. The root cause is lack of access restrictions on a mechanism used to store sensitive data. The publicly ...