danielmiessler

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

danielmiessler records in CISA KEV

No danielmiessler vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Fabric · all components

TI-2024-19323 CVE-2024-29154 · GHSA-rpcv-9583-9pr7

LOW 32

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00351 Published 2024-03-18 No fix listed CWE-79