Filtered by vendor Nasa Subscriptions
Filtered by product Openmct Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-45282 1 Nasa 1 Openmct 2024-09-19 7.5 High
In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action.
CVE-2023-45884 1 Nasa 1 Openmct 2024-09-04 6.5 Medium
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
CVE-2023-45885 1 Nasa 1 Openmct 2024-09-04 5.4 Medium
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
CVE-2022-23054 1 Nasa 1 Openmct 2024-08-03 6.1 Medium
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVE-2022-23053 1 Nasa 1 Openmct 2024-08-03 6.1 Medium
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.
CVE-2022-22126 1 Nasa 1 Openmct 2024-08-03 6.1 Medium
Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.