Lucene search
Veracode Vulnerability DatabaseVERACODE:40708HistoryMay 26, 2023 - 10:31 a.m.
Information Disclosure
2023-05-2610:31:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
francoisjacquet/rosariosis
information disclosure
permissions
file names
uploaded files
attacker
system
0.001 Low
EPSS
Percentile
44.8%
francoisjacquet/rosariosis is vulnerable to Information Disclosure. The vulnerability exists due to the lack of permissions and random generation of file names for uploaded files, which allows an attacker to download files on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francoisjacquet/rosariosis | le | v10.9.5 | |
| francoisjacquet/rosariosis | le | v10.9.5 |
Related
prion
prion
Design/Logic Flaw
2023-05-12 01:15:00
osv
osv
CVE-2023-2665
2023-05-12 01:15:09
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
2023-05-19 18:30:25
cve
cve
CVE-2023-2665
2023-05-12 01:15:09
huntr
huntr
github
github
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
2023-05-19 18:30:25
cvelist
cvelist
nvd
nvd
CVE-2023-2665
2023-05-12 01:15:09