EUVD-2022-27275

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

openmct is vulnerable to cross-site scripting. The library does not properly escape the URL field in the Web Page element, allowing an attacker to inject and execute malicious script...

CVE-2022-22126

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

CVE-2022-22126

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

PT-2022-15262

Name of the Vulnerable Software and Affected Versions Openmct versions 1.3.0 through 1.7.7 Description The issue is related to stored XSS via the “Web Page” element, allowing the injection of malicious JavaScript into the URL field. This affects NASA Openmct version 1.7.7 and prior versions...

CVE-2022-22126: Improper Neutralization of Input During Web Page Generation

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...