CVE-2025-29621: High severity rosariosis vulnerability

Published Apr 22, 2025

Updated

Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module. This vulnerability allows attackers to manipulate application settings.

Affected Software

1 affected component

Francois Jacquet RosarioSIS

Event History

Apr 22, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-29621?

CVE-2025-29621 is classified as a medium-severity vulnerability due to its potential to allow content spoofing.

How do I fix CVE-2025-29621?

To fix CVE-2025-29621, ensure that the Theme configuration settings in the My Preferences module are secured against unauthorized changes.

What impact does CVE-2025-29621 have on users?

CVE-2025-29621 can deceive users by altering displayed information, potentially leading to privacy breaches or misinformation.

Which software is affected by CVE-2025-29621?

CVE-2025-29621 affects Francois Jacquet RosarioSIS v12.0.0 specifically.

Who can exploit CVE-2025-29621?

Any unauthorized user with access to the My Preferences module in Francois Jacquet RosarioSIS v12.0.0 can exploit CVE-2025-29621.