Description
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
Remediation
References
https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f
Related Vulnerabilities
CVE-2020-27216 Vulnerability in maven package jetty:jetty
CVE-2022-41935 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui
CVE-2023-31719 Vulnerability in npm package @frangoteam/fuxa
CVE-2022-29172 Vulnerability in maven package org.webjars.bower:auth0-lock
CVE-2023-49373 Vulnerability in maven package com.jfinal:jfinal