CVE-2023-29918: Medium severity rosariosis vulnerability
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
Credit
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-29918.
What is the severity rating of CVE-2023-29918?
CVE-2023-29918 has a severity rating of 5.4, which is considered medium.
How is RosarioSIS 10.8.4 affected by CVE-2023-29918?
RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.
How can I fix the vulnerability in RosarioSIS 10.8.4?
Currently, there is no known fix for this vulnerability in RosarioSIS 10.8.4. It is recommended to update to a newer version when available or apply any patches provided by the vendor.
Where can I find more information about CVE-2023-29918?
You can find more information about CVE-2023-29918 in the following references: [Google Docs](https://docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/edit?usp=sharing), [Exploit-DB](https://www.exploit-db.com/exploits/51622), [NVD](https://nvd.nist.gov/vuln/detail/CVE-2023-29918).