OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-28384 · ADVISORY
• OpenC3/cosmos#1828 · WEB
• OpenC3/cosmos#1828 · WEB
• OpenC3/cosmos · PACKAGE
• OpenC3/cosmos release v6.1.0 · WEB
• rubysec/ruby-advisory-db · WEB
• openc3.com · WEB
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · WEB
• openc3.com · Product
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · Exploit

Lỗ hổng khác của openc3

• CVE-2026-42088CAO 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42087NGHIÊM TRỌNG 9.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 t…
• CVE-2026-42086TRUNG BÌNH 4.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42085TRUNG BÌNH 4.3OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…
• CVE-2026-42084CAO 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…