Prototype Pollution in NASA Open MCT

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-45282 · ADVISORY
• nasa/openmct#7094 · WEB
• nasa/openmct commit 2243381 · WEB
• nasa/openmct · PACKAGE
• nasa/openmct · WEB
• nasa.github.io/openmct · WEB
• linkedin.com/pulse/prototype-pollution-nasas-open-mct-cve-2023-45282 · WEB
• nasa.github.io/openmct · Product

openmct のその他の脆弱性

• CVE-2023-45885中 5.4Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new com…
• CVE-2023-45884中 6.5Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information …
• CVE-2022-23054中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious J…
• CVE-2022-23053中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious…
• CVE-2022-22126中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScr…