EUVD-2022-28164

Malicious code in bioql PyPI...

CVE-2022-22126

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

PT-2022-15262

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the “Web Page” element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior versions...

CVE-2022-23054: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

CVE-2022-22126: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

Nasa Openmct 跨站脚本漏洞

Nasa Openmct is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A cross-site scripting vulnerability exists in Openmct versions 1.3.0 through 1.7.7, which stems from the software's lack of effective filtering and escaping for...

PT-2022-15813

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the “Condition Widget” element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior...