CVE-2024-54160: Lf Projects Opensearch

Medium severity, CVSS 6.4. EPSS: 0.6% chance of exploitation in the next 30 days.

dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because Markdown is not sanitized when previewing a header or footer.

Affected products

• Lf Projects Opensearch: before 2.19 (fixed in 2.19)

Published 2025-02-12. Last modified 2026-06-17.