Unrated
danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.
CVE-2024-29154
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- advisory sec1.io