OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-28382 · ADVISORY
• OpenC3/cosmos#1828 · WEB
• OpenC3/cosmos commit fc7e113 · WEB
• OpenC3/cosmos · PACKAGE
• OpenC3/cosmos release v6.1.0 · WEB
• rubysec/ruby-advisory-db · WEB
• openc3.com · WEB
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · WEB
• openc3.com · Product
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · Exploit

openc3 のその他の脆弱性

• CVE-2026-42088高 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42087緊急 9.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 t…
• CVE-2026-42086中 4.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42085中 4.3OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…
• CVE-2026-42084高 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…