Rosariosis
Approved changes feed: RSS · Atom
cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Rosariosis (83ac7bc8-8ab3-57e5-b0d6-e458cf6cbf71) |
|---|---|
| Product | Rosariosis (7fd1265a-91a0-5c55-9c2b-77a889573650) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/rosariosis/rosariosis |
purl2cpe | 2026-06-01 10:16:32.408563 |
pkg:github/francoisjacquet/rosariosis |
purl2cpe | 2026-06-01 10:16:32.408566 |
pkg:gitlab/francoisjacquet/rosariosis |
purl2cpe | 2026-06-01 10:16:32.408569 |
pkg:sourceforge/rosariosis |
purl2cpe | 2026-06-01 10:16:32.408572 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-93014 |
vulnerable | 2026-10-13 12:28:56.146179 |
RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter
HIGH (7.1)
RosarioSIS versions before 12.9 fail to validate the filename request parameter in Users and Students modules, allowing authenticated users to unlink allow-listed files via path traversal. Attackers can use parent-directory sequences to escape upload directories and delete CSS, XML, JSON resources and other users' documents throughout the installation.
Published: 2026-09-17T15:16:52.130Z
Updated: 2026-09-17T15:47:11.421Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2665 |
vulnerable | 2026-06-08 06:02:42.734304 |
Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis
HIGH (7.5)
Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.
Published: 2023-05-12T00:00:00.000Z
Updated: 2025-01-24T15:58:05.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2202 |
vulnerable | 2026-06-08 06:02:41.609065 |
Improper Access Control in francoisjacquet/rosariosis
MEDIUM (4.6)
Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.
Published: 2023-04-21T00:00:00.000Z
Updated: 2025-02-04T20:48:53.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0994 |
vulnerable | 2026-06-08 05:52:33.589457 |
Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis
HIGH (8.1)
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.
Published: 2023-02-24T00:00:00.000Z
Updated: 2025-03-12T15:28:06.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3072 |
vulnerable | 2026-06-08 05:47:19.131888 |
Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis
HIGH (8)
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.
Published: 2022-09-01T07:30:12.000Z
Updated: 2024-08-03T01:00:10.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2714 |
vulnerable | 2026-06-08 05:43:36.064324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2067 |
vulnerable | 2026-06-08 05:42:50.181546 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2036 |
vulnerable | 2026-06-08 05:42:50.127709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1997 |
vulnerable | 2026-06-08 05:39:14.343725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44567 |
vulnerable | 2026-06-08 05:36:46.353450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44566 |
vulnerable | 2026-06-08 05:36:46.352919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44565 |
vulnerable | 2026-06-08 05:36:46.352559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44427 |
vulnerable | 2026-06-08 05:36:45.762264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15721 |
vulnerable | 2026-06-08 05:19:26.515857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13278 |
vulnerable | 2026-06-08 05:18:00.451396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.