tocsin

CVE-2024-55028

1 advisory.

PyPI/fprime CVE-2024-55028: critical 9.8, EPSS 0.79%

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-3.4.3

Fixed versions

No fixed version in the source.

Sources

CVE-2024-55028 · published · modified · JSON