Medium severity6.4OSV Advisory· Published Feb 12, 2025· Updated Apr 15, 2026

CVE-2024-54160

Description

dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Opensef Project/Dashboards ReportingOSV
Range: 1.0.0, 1.0.0-beta1, 1.0.0-rc1, …
Opensearch Project/Opensearchllm-fuzzy
Range: <2.19.0.0

Patches

Vulnerability mechanics

References

github.com/opensearch-project/dashboards-reporting/compare/2.18.0.0...2.19.0.0nvd
github.com/opensearch-project/dashboards-reporting/pull/476nvd
github.com/opensearch-project/opensearch-build/blob/main/release-notes/opensearch-release-notes-2.19.0.mdnvd
opensearch.org/releases.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000