Lucene search
Veracode Vulnerability DatabaseVERACODE:34329HistoryFeb 21, 2022 - 10:40 a.m.
Cross-site Scripting (XSS)
2022-02-2110:40:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
31.5%
openmct is vulnerable to cross-site scripting. The library does not properly escape the URL field in the Summary Widget element, allowing an attacker to inject and execute malicious javascript.
Related
cve
cve
CVE-2022-23054
2022-02-20 19:15:09
prion
prion
Design/Logic Flaw
2022-02-20 19:15:00
nvd
nvd
CVE-2022-23054
2022-02-20 19:15:09
cvelist
cvelist
CVE-2022-23054 Openmct XSS via the “Summary Widget”
2022-02-20 19:00:17