Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis

CVE-2023-2665

What is CVE-2023-2665?

The Rosariosis project prior to version 11.0 has a vulnerability that allows sensitive data to be stored insecurely due to the absence of necessary access control mechanisms. This oversight can potentially expose sensitive information to unauthorized users. Developers utilizing this software should review their implementations to mitigate risk and ensure secure data handling practices.

References