4 matches found
CVE-2025-28384
An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal...
9.1CVSS6.8AI score0.00886EPSS
SaveExploits1References1
CVE-2025-28384
An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal...
9.1CVSS0.00886EPSS
SaveExploits1References5
CVE-2025-28384
The OpenC3 COSMOS framework (specifically the openc3-cosmos-tool-iframe component) is vulnerable to a Directory Traversal (CWE-22) issue in the /script-api/scripts/ endpoint. The root cause is improper input validation and insufficient sanitization of path parameters, which allows an authenticate...
9.1CVSS6.4AI score0.00886EPSS
SaveExploits1References5Affected Software1
20