Lucene search
+L

72 matches found

Github Security Blog
Github Security Blog
added 2026/09/23 6:57 p.m.5 views

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

Summary COSMOS reads configuration from a user-writable overlay targetsmodified/ before the read-only plugin-installed targets/ tree, and the config subsystem executes code on those files: ConfigParser renders every file as ERB by default, a GENERICREADCONVERSION / GENERICWRITECONVERSION block is...

9.9CVSS6.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder