{"id":"CVE-2022-2714","aliases":["GHSA-vh4m-mw8w-g4w8"],"url":"https://o3.security/vulnerability/CVE-2022-2714","summary":"Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis","details":"Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.","published":"2022-09-06T10:15:12Z","modified":"2026-07-15T01:49:19.366646207Z","cvss":{"score":8.1,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"francoisjacquet/rosariosis","fixedVersion":"10.1"}],"fix":{"url":"https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3","label":"francoisjacquet/rosariosis@4022954"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2714.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2714"},{"type":"FIX","url":"https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-15T01:49:19.366646207Z"}}