Description
Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.
Remediation
References
https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f
Related Vulnerabilities
CVE-2021-31812 Vulnerability in maven package org.apache.pdfbox:pdfbox
CVE-2021-4245 Vulnerability in npm package rfc6902
CVE-2023-29216 Vulnerability in maven package org.apache.linkis:linkis-engineplugin-jdbc
CVE-2022-39299 Vulnerability in npm package @node-saml/passport-saml
CVE-2020-36320 Vulnerability in maven package com.vaadin:vaadin-server