CVE-2024-29154

HIGH · CVSS 7.4 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-03-18 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.4. See the original NVD description below for full technical details.

CVE

CVE-2024-29154

Severity

HIGH

CVSS

7.4

EPSS

0.35%

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText.