未評価
danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.
CVE-2024-29154
SecPulse初出
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory sec1.io