CVE-2023-45885
1 advisory.
npm/openmct CVE-2023-45885: medium 5.4, EPSS 0.46%
NASA Open MCT Cross Site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-v8fc-qxvj-f3mg
- https://nvd.nist.gov/vuln/detail/CVE-2023-45885
- https://github.com/nasa/openmct/pull/7148
- https://github.com/nasa/openmct/pull/7148/commits/4e95e12559c9c5364269ff366a59768573baacb4
- https://github.com/nasa/openmct
- https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f
CVE-2023-45885 · published · modified · JSON