Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/10/02 7:29 p.m.21 views

OpenC3 stores passwords in clear text (`GHSL-2024-129`)

Summary OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting see GHSL-2024-128. Note: This CVE only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition Impa...

6.5CVSS6.2AI score0.00342EPSS
SaveExploits1References6Affected Software2
Vulnrichment
Vulnrichment
added 2024/10/02 7:17 p.m.17 views

CVE-2024-47529 OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting s...

4.8CVSS6.8AI score0.00342EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/10/02 7:17 p.m.43 views

CVE-2024-47529 OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting s...

4.8CVSS0.00342EPSS
SaveExploits1References3
Rows per page
Query Builder