11 matches found
EUVD-2025-8097
Malicious code in bioql PyPI...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
Cross-site Scripting (XSS)
Overview fprime-gds is a F Prime Flight Software Ground Data System layer Affected versions of this package are vulnerable to Cross-site Scripting XSS by uploading a malicious Vue file as a cmdDisp.CMDNOOPSTRING in the Dashboard tab. Details Cross-site scripting or XSS is a code vulnerability tha...
CVE-2024-55028
The NASA Fprime flight software framework (v3.4.3) is vulnerable to a template injection vulnerability in its Dashboard. Attackers can execute arbitrary code by uploading a specially crafted Vue file . The vulnerability is specifically associated with the fprime-gds (Flight Software Ground Data S...
CVE-2024-55028: Improper Control of Generation of Code
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
PT-2025-12824
Name of the Vulnerable Software and Affected Versions NASA Fprime version 3.4.3 Description A template injection issue in the Dashboard allows attackers to execute arbitrary code by uploading a crafted Vue file. Recommendations For NASA Fprime version 3.4.3, consider restricting the upload of Vue...
CVE-2024-55028
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...
fprime 代码注入漏洞
fprime is a NASA open source framework for flight software and embedded systems. A security vulnerability exists in fprime v3.4.3, which stems from template injection in the dashboard and could lead to an attacker executing arbitrary code by uploading a specially crafted Vue file...
