In breve
- CVE-2023-45282 è una vulnerabilità ALTO (CVSS 7.5) che riguarda openmct (nasa), openmct.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.1% delle vulnerabilità.
- Correzione: aggiornare a 3.1.0 o successiva.
| Package | Affected versions | Patched versions |
|---|
| openmct | < 3.1.0
| 3.1.0
|
| openmct npm | ≤ 3.0.2
| No fix yet |
Description
In NASA Open MCT (aka openmct) before commit 545a177 is subject to a prototype pollution which can occur via an import action.
NVD description
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free