6 matches found
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
CVE-2024-55029
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...
fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55029 via fprime-gds (4.3.0)
fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55029 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749311...
CVE-2024-55029
NASA Fprime v3.4.3 contains multiple cross-site scripting (XSS) vulnerabilities. Specifically, the fprime-gds package (a F Prime Flight Software Ground Data System layer) is vulnerable on the Run Commands table . An attacker can execute scripts in the context of a user's browser by injecting mali...