CVE-2023-2665: Insecure Storage of Sensitive Information

May 19, 2023

Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.

References

github.com/advisories/GHSA-36cm-h8gv-mg97
github.com/francoisjacquet/rosariosis/commit/09d5afaa6be07688ca1a7ac3b755b5438109e986
huntr.dev/bounties/42f38a84-8954-484d-b5ff-706ca0918194
nvd.nist.gov/vuln/detail/CVE-2023-2665

Code Behaviors & Features

Detect and mitigate CVE-2023-2665 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →