← All advisories

Medium severity5.4NVD Advisory· Published May 2, 2023· Updated Jun 17, 2026

CVE-2023-29918

CVE-2023-29918

Description

RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
francoisjacquet/rosariosisPackagist	<= 10.8.4	—

Affected products

3

RosarioSIS/RosarioSIS
cpe:2.3:a:rosariosis:rosariosis:10.8.4:*:*:*:*:*:*:*
RosarioSIS/RosarioSISdescription
ghsa-coords
pkg:composer/francoisjacquet/rosariosis
Range: <= 10.8.4

Patches

Vulnerability mechanics

References

3

docs.google.com/document/d/1JAhJOlfKKD5Y5zEKo0_8a3A-nQ7Dz_GIMmlXmOvXV48/editnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-f8hp-grmr-pp7jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-29918ghsaADVISORY

News mentions

0

No linked articles in our index yet.