NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-45884 · ADVISORY
• nasa/openmct#7148 · WEB
• nasa/openmct#7148 · WEB
• nasa/openmct · PACKAGE
• linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f · WEB

openmct のその他の脆弱性

• CVE-2023-45885中 5.4Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new com…
• CVE-2023-45282高 7.5In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
• CVE-2022-23054中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious J…
• CVE-2022-23053中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious…
• CVE-2022-22126中 6.1Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScr…