Vulnerability Description
danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.
CVSS Score
7.4
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Danielmiessler | Fabric | <= 1.3.0 |
Related Weaknesses (CWE)
References
- https://sec1.io/security-advisories/cross-site-scripting-xss/Third Party Advisory
- https://sec1.io/security-advisories/cross-site-scripting-xss/Third Party Advisory
FAQ
What is CVE-2024-29154?
CVE-2024-29154 is a vulnerability with a CVSS score of 7.4 (HIGH). danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.
How severe is CVE-2024-29154?
CVE-2024-29154 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-29154?
Check the references section above for vendor advisories and patch information. Affected products include: Danielmiessler Fabric.