In short
- CVE-2023-45282 is a HIGH (CVSS 7.5) vulnerability affecting openmct (nasa), openmct.
- Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.1% of all vulnerabilities.
- Fix: update to 3.1.0 or later.
| Package | Affected versions | Patched versions |
|---|
| openmct | < 3.1.0
| 3.1.0
|
| openmct npm | ≤ 3.0.2
| No fix yet |
Description
In NASA Open MCT (aka openmct) before commit 545a177 is subject to a prototype pollution which can occur via an import action.
NVD description
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free