CVSS 3.1 Score 3.5 of 10 (low)


Published Apr 1, 2024
Updated: Apr 2, 2024


CVE-2024-3138 is a disputed vulnerability found in francoisjacquet RosarioSIS 11.5.1. It is categorized as problematic and involves cross site scripting through unknown processing of the component Add Portal Note. The exploit can be initiated remotely, posing a potential danger to organizations using this software. The vendor claims that the PDF is opened by the browser app in a sandbox, preventing access to data from the website. Remediation steps are not provided, and it is uncertain whether this vulnerability actually exists at this time.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-3138 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options