CVE-2024-55028

The NASA Fprime flight software framework (v3.4.3) contains a template injection vulnerability in its Dashboard. An attacker can achieve arbitrary code execution by uploading a specially crafted Vue file . Additionally, the fprime-gds Python package is susceptible to Cross-site Scripting (XSS) wh...