Em resumo
- CVE-2023-45282 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta openmct (nasa), openmct.
- Chance de exploração nos próximos 30 dias (EPSS): 1.2%, maior que 67.1% das vulnerabilidades.
- Correção: atualize para 3.1.0 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| openmct | < 3.1.0
| 3.1.0
|
| openmct npm | ≤ 3.0.2
| No fix yet |
Description
In NASA Open MCT (aka openmct) before commit 545a177 is subject to a prototype pollution which can occur via an import action.
NVD description
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free