{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/rosariosis--12.9/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:rosariosis:rosariosis:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-93014"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["RosarioSIS (\u003c 12.9)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["RosarioSIS"],"content_html":"\u003cp\u003eRosarioSIS versions prior to 12.9 contain a path traversal vulnerability in the Users and Students modules. This issue arises due to insufficient validation of the 'filename' request parameter, which is used during file handling operations. An authenticated attacker can manipulate this parameter by injecting directory traversal sequences (e.g., ../) to escape the intended upload or application directories. Successful exploitation allows the attacker to delete arbitrary files across the application installation, including system-critical resources like CSS, XML, and JSON configuration files, or sensitive documents belonging to other users. This vulnerability represents a significant risk to application integrity and data confidentiality, as it enables destructive actions against the underlying file system within the scope of the web application user.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in the unauthorized deletion of arbitrary files within the web root and potentially the wider application directory, leading to service disruption, loss of configuration, or data loss. The vulnerability affects the confidentiality and availability of the RosarioSIS installation.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritized actions for security and IT operations teams:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade RosarioSIS to version 12.9 or later immediately to incorporate the required filename validation patches.\u003c/li\u003e\n\u003cli\u003eAudit access logs for web requests containing directory traversal sequences (e.g., \u0026quot;..%2f\u0026quot; or \u0026quot;../\u0026quot;) targeting the Users or Students modules.\u003c/li\u003e\n\u003cli\u003eImplement restrictive file system permissions to ensure the web server user only has write access to designated upload directories, preventing unauthorized deletion of system files.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-09-17T17:59:06Z","date_published":"2026-09-17T17:59:06Z","id":"https://feed.craftedsignal.io/briefs/2026-09-rosariosis-path-traversal/","summary":"Authenticated users can exploit improper filename validation in RosarioSIS versions prior to 12.9 to perform unauthorized file deletion via directory traversal.","title":"Path Traversal Vulnerability in RosarioSIS","url":"https://feed.craftedsignal.io/briefs/2026-09-rosariosis-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - RosarioSIS (\u003c 12.9)","version":"https://jsonfeed.org/version/1.1"}