What’s Vulnerable › Vulnerabilities

CVE-2023-29918

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-05-02 · updated 2026-06-17
• Weakness: CWE-1236

Description

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.

Affected products

• francoisjacquet/rosariosis: 10.8.4

References

• https://docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit?usp=sharing
• https://docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit?usp=sharing

Get alerted when CVE-2023-29918 or the next vulnerability affects your stack