CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

PT-2023-29746 · Nasa · Openmct

Name of the Vulnerable Software and Affected Versions: NASA Open MCT versions through 3.1.0 Description: The issue allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin. This is a Cross Site Scripting XSS vulnerability. Recommendations: For versions...