Nasa Openmct
6 CVEs affecting Nasa Openmct. Latest disclosed: 2023-11-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45282 | High | 7.5 | 2023-10-06 | In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action. |
CVE-2023-45884 | Medium | 6.5 | 2023-11-09 | Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLay… |
CVE-2022-23054 | Medium | 6.1 | 2022-02-20 | Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the… |
CVE-2022-23053 | Medium | 6.1 | 2022-02-20 | Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into th… |
CVE-2022-22126 | Medium | 6.1 | 2022-02-20 | Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’… |
CVE-2023-45885 | Medium | 5.4 | 2023-11-09 | Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in t… |