CVE-2022-22126

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

CVE-2022-22126 Openmct XSS via the “Web Page” element

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

CVE-2022-22126 Openmct XSS via the “Web Page” element

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

CVE-2022-22126

OpenMCT vulnerability CVE-2022-22126: OpenMCT versions 1.3.0 to 1.7.7 are affected by a stored XSS in the Web Page element, allowing injection of malicious JavaScript via the URL field. Affected product/version mix references NASA OpenMCT 1.7.7 and earlier 1.3.0+; the issue is consistent across m...

CVE-2022-22126: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

Nasa OpenMCT cross-site scripting vulnerabilities

Nasa Openmct is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A cross-site scripting vulnerability exists in Openmct versions 1.3.0 through 1.7.7, which stems from the software's lack of effective filtering and escaping for...

PT-2022-15262

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the “Web Page” element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior versions...

PT-2022-15813

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the “Condition Widget” element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior...

PT-2022-15814

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the "Summary Widget" element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior versions...

CVE-2022-23054: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

Openmct cross-site scripting vulnerabilities

Nasa Openmct is an open source open mission control technology from NASA, Inc. It is used to visualize data on desktop and mobile devices. A cross-site scripting vulnerability exists in Openmct up to version 1.7.7, which stems from the software's lack of effective filtering and escaping of...

CVE-2022-23053: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...