CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45885

NASA Open MCT (aka openmct) up to version 3.1.0 is affected by a Cross Site Scripting (XSS) vulnerability in the flexibleLayout plugin’s new component feature that can lead to arbitrary code execution. The root cause is the ability to inject or execute code via the component feature, enabling an ...

CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45884

CVE-2023-45884 is a CSRF vulnerability in NASA Open MCT (openmct) up to and including version 3.1.0, exposed via the flexibleLayout plugin. Attackers can view sensitive information; the available documents do not specify a fixed patch or remediation, only that the issue exists through 3.1.0.

CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in NASA Open MCT 3.1.0 and earlier versions, which stems from the presence of a cross-site scripting XSS vulnerability that allows an...

nasa.gov Cross Site Scripting vulnerability OBB-3764837

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

nasa.gov Cross Site Scripting vulnerability OBB-3738203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Prototype Pollution in NASA Open MCT

In NASA Open MCT aka openmct before commit 545a177 is subject to a prototype pollution which can occur via an import action...

GHSA-4XCX-CWRQ-W792 Prototype Pollution in NASA Open MCT

In NASA Open MCT aka openmct before commit 545a177 is subject to a prototype pollution which can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

Deserialization of untrusted data

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in versions prior to NASA Open MCT 2.2.5 545a177, which stems from the presence of a prototype contamination vulnerability...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT (openmct), a prototype pollution vulnerability affects versions 2.2.5 through 3.1.0 via an import action. The issue is fixed by upgrading to version 3.1.0 or later. This corresponds to an impact on availability and integrity as indicated by CVSS 3.1 metrics, but exploitation deta...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

The US Navy, NATO, and NASA Are Using a Shady Chinese Company’s Encryption Chips

The US government warns encryption chipmaker Hualan has suspicious ties to China’s military. Yet US agencies still use one of its subsidiary’s chips, raising fears of a backdoor...