NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in NASA Open MCT 3.1.0 and prior versions that stems from the presence of a cross-site request forgery CSRF vulnerability that allows...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45884

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45884: Cross-Site Request Forgery (CSRF)

Cross Site Request Forgery CSRF vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin...

CVE-2023-45885: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

CVE-2023-45885

Cross Site Scripting XSS vulnerability in NASA Open MCT aka openmct through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin...

PT-2023-29745

Name of the Vulnerable Software and Affected Versions NASA Open MCT versions through 3.1.0 Description A Cross Site Request Forgery CSRF issue allows attackers to view sensitive information via the flexibleLayout plugin. The estimated number of potentially affected devices worldwide is not...