GHSA-g66v-3v62-g375MediumCVSS 6.5

RosarioSIS improper access control vulnerability

Published
April 21, 2023
Last Modified
November 9, 2023

🔗 CVE IDs covered (1)

CVE-2023-2202 →

📋 Description

RosarioSIS prior to version 10.9.3 has a vulnerability that allows a user to return to a page containing personally identifiable information (PII) and sensitive information even after logging out of the application by using the browser's back button.

🎯 Affected products1

  • composer/francoisjacquet/rosariosis:< 10.9.3

🔗 References (5)