CVE-2024-55028: PYSEC-2025-114 - A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted

CVE-2024-55028 · Severity: low · CVSS 3.1 · Published 2025-03-25

Technologies: fprime (PyPI). Vendors: PyPI.

Executive brief

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.

Affected products

PyPI fprime

Related threats

PYSEC-2025-116 - A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.
PYSEC-2025-115 - NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.