Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/22 10:22 p.m.14 views

OpenC3 COSMOS allows arbitrary writes to plugins directory via path-traversed config filenames

Summary OpenC3 COSMOS contains a design flaw in the savetoolconfig function that allows saving tool configuration files at arbitrary locations inside the shared /plugins directory tree by supplying crafted configuration filenames. Although the implementation sufficiently mitigates standard path...

4.3CVSS5.9AI score0.00313EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder