What’s Vulnerable › Vulnerabilities

CVE-2023-0994: Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-24 · updated 2026-06-17
• Weakness: CWE-200

Description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.

Affected products

• francoisjacquet/rosariosis: before 10.8.2 — fixed in 10.8.2

How to fix

Upgrade to a fixed version: francoisjacquet/rosariosis 10.8.2. Check the vendor advisory for mitigations.

References

• https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76
• https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad
• https://github.com/francoisjacquet/rosariosis/commit/630d3e3d78270db8dbcbfe87db265bc3e70c5a76
• https://huntr.dev/bounties/a281c586-9b97-4d17-88ff-ca91bb4c45ad

Get alerted when CVE-2023-0994 or the next vulnerability affects your stack