RosarioSIS vulnerabilities
We track 1 vulnerability in RosarioSIS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest RosarioSIS vulnerabilities
- 7.1 High severity
RosarioSIS: Improper Limitation of a Pathname to a Restricted Directory
RosarioSIS versions before 12.9 fail to validate the filename request parameter in Users and Students modules, allowing authenticated users to unlink allow-listed files via path traversal. Attackers can use parent-directory sequences to escape upload directori