What is GHSA-vh4m-mw8w-g4w8?

GHSA-vh4m-mw8w-g4w8 is a security advisory published by GitHub Security Advisories with High severity. RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency

Which CVE IDs does GHSA-vh4m-mw8w-g4w8 cover?

GHSA-vh4m-mw8w-g4w8 covers the following CVE IDs: CVE-2022-2714. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vh4m-mw8w-g4w8?

GHSA-vh4m-mw8w-g4w8 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-vh4m-mw8w-g4w8?

GHSA-vh4m-mw8w-g4w8 affects 1 product, including: composer/francoisjacquet/rosariosis:\u003c 10.1.

GHSA-vh4m-mw8w-g4w8HighCVSS 8.1

RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency

Vendor

GitHub Security Advisories

Published

September 7, 2022

Last Modified

February 2, 2023

🔗 CVE IDs covered (1)

CVE-2022-2714 →

📋 Description

RosarioSIS Student Information System prior to version 10.1 is vulnerable to Improper Handling of Length Parameter Inconsistency.

🎯 Affected products1

composer/francoisjacquet/rosariosis:< 10.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-2714
https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3
https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95
https://github.com/advisories/GHSA-vh4m-mw8w-g4w8