GitHub Advisoryadvisory · Packagist

GHSA-vh4m-mw8w-g4w8 RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency

HIGH Published 2022-09-07 Modified 2022-09-15 Official page ↗

Aliases: CVE-2022-2714
Ecosystem: Packagist
Packages: francoisjacquet/rosariosis
Severity: High
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses: CWE-130
Reviewed: 2022-09-15

Affected packages

• Packagist francoisjacquet/rosariosis: < 10.1 → fixed in 10.1

Description

RosarioSIS Student Information System prior to version 10.1 is vulnerable to Improper Handling of Length Parameter Inconsistency.

Related

Alias · CVE (1)

CVE-2022-2714 Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. vulnerability

Weakness · CWE (1)

CWE-130 Improper Handling of Length Parameter Inconsistency weakness

References