Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: nasa openmct 1.3.0* Clear all filters
TI-2022-07228 CVE-2022-23054 · GHSA-wjmx-7pv5-fjrg

Openmct XSS via the “Summary Widget”

Priority LOW 28

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00615 Published 2022-02-20 No fix listed CWE-79
TI-2022-07227 CVE-2022-23053 · GHSA-xw8c-2r63-9grf

Openmct XSS via the “Condition Widget”

Priority LOW 28

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Condition Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00615 Published 2022-02-20 No fix listed CWE-79
TI-2022-06470 CVE-2022-22126 · GHSA-7v96-4336-925w

Openmct XSS via the “Web Page” element

Priority LOW 28

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00615 Published 2022-02-20 No fix listed CWE-79