CVE-2024-55028: Code Injection
Published Mar 25, 2025
·Updated
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file.
Affected Software
2 affected components
nasa Fprime
nasa Fprime=3.4.3
Event History
Mar 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-55028?
CVE-2024-55028 has a high severity rating due to the potential for arbitrary code execution.
2
How do I fix CVE-2024-55028?
To fix CVE-2024-55028, update NASA Fprime to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2024-55028?
CVE-2024-55028 is a template injection vulnerability that allows for code execution through crafted file uploads.
4
Which version of NASA Fprime is affected by CVE-2024-55028?
CVE-2024-55028 affects NASA Fprime v3.4.3.
5
Can CVE-2024-55028 be exploited remotely?
Yes, CVE-2024-55028 can be exploited remotely by uploading a specially crafted Vue file.