CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

CVE-2023-45885

NASA Open MCT (aka openmct) up to version 3.1.0 is affected by a Cross Site Scripting (XSS) vulnerability in the flexibleLayout plugin’s new component feature that can lead to arbitrary code execution. The root cause is the ability to inject or execute code via the component feature, enabling an ...

CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in NASA Open MCT 3.1.0 and earlier versions, which stems from the presence of a cross-site scripting XSS vulnerability that allows an...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in NASA Open MCT 3.1.0 and prior versions that stems from the presence of a cross-site request forgery CSRF vulnerability that allows...

Prototype Pollution

Open MCT is vulnerable to prototype pollution. The vulnerability is due to the import action improperly sanitizing user input, which allows an attacker to add arbitrary proto properties to the global object prototype...

Prototype Pollution in NASA Open MCT

In NASA Open MCT aka openmct before commit 545a177 is subject to a prototype pollution which can occur via an import action...

GHSA-4XCX-CWRQ-W792 Prototype Pollution in NASA Open MCT

In NASA Open MCT aka openmct before commit 545a177 is subject to a prototype pollution which can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

Deserialization of untrusted data

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in versions prior to NASA Open MCT 2.2.5 545a177, which stems from the presence of a prototype contamination vulnerability...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT aka openmct before 3.1.0, prototype pollution can occur via an import action...

CVE-2023-45282

In NASA Open MCT (openmct), a prototype pollution vulnerability affects versions 2.2.5 through 3.1.0 via an import action. The issue is fixed by upgrading to version 3.1.0 or later. This corresponds to an impact on availability and integrity as indicated by CVSS 3.1 metrics, but exploitation deta...