Executive brief
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
Affected products
- PyPI fprime
Junglewise Threat Intelligence
CVE-2024-55029: PYSEC-2025-115 - NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.
CVE-2024-55029 · Severity: low · CVSS 3.1 · Published 2025-03-25
Technologies: fprime (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2025-116 - A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands.
- PYSEC-2025-114 - A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted