Description

Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.

Remediation

References

https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f

Related Vulnerabilities

CVE-2017-3202 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer

CVE-2018-20822 Vulnerability in maven package org.webjars.npm:node-sass

CVE-2023-33779 Vulnerability in maven package com.xuxueli:xxl-job

CVE-2020-7712 Vulnerability in maven package org.webjars.npm:json

CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http_2.13

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Exploit Third Party Advisory CWE-352