Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2023-2665
PUBLISHED
More InfoOfficial Page
Assigner-@huntrdev
Assigner Org ID-c09c270a-b464-47c1-9133-acb35b22c19a
View Known Exploited Vulnerability (KEV) details
Published At-12 May, 2023 | 00:00
Updated At-24 Jan, 2025 | 15:58
Rejected At-
▼CVE Numbering Authority (CNA)
Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.

Affected Products
Vendor
francoisjacquet
Product
francoisjacquet/rosariosis
Versions
Affected
  • From unspecified before 11.0 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-921CWE-921 Storage of Sensitive Data in a Mechanism without Access Control
Type: CWE
CWE ID: CWE-921
Description: CWE-921 Storage of Sensitive Data in a Mechanism without Access Control
Metrics
VersionBase scoreBase severityVector
3.07.5HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Version: 3.0
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
N/A
https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
N/A
Hyperlink: https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
Resource: N/A
Hyperlink: https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
x_transferred
https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
x_transferred
Hyperlink: https://huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
Resource:
x_transferred
Hyperlink: https://github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found