CVE-2024-3138
1 advisory.
Packagist/francoisjacquet/rosariosis CVE-2024-3138: low 3.5, EPSS 0.47%
RosarioSIS cross site scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 11.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r32g-w9cv-9fgc
- https://nvd.nist.gov/vuln/detail/CVE-2024-3138
- https://github.com/francoisjacquet/rosariosis
- https://powerful-bulb-c36.notion.site/Stored-xss-via-malicious-PDF-upload-98fb1ea6b9bf4ddfaf04d61b2c05410a
- https://vuldb.com/?ctiid.258911
- https://vuldb.com/?id.258911
- https://vuldb.com/?submit.307450
CVE-2024-3138 · published · modified · JSON