{"action":"Upgrade openmct to 3.1.1 or later.","affected":[{"fixed":"3.1.1","introduced":"0"}],"component":"openmct","cve_ids":["CVE-2023-45884"],"ecosystem":"npm","epss":0.00328,"exploited":false,"fixed_versions":["3.1.1"],"ghsa_id":"GHSA-4g88-4hgm-m99x","id":"tcs_01M5KF0BAPCV4J7TNX9F53D9SB","modified_at":"2023-11-15T17:56:28.226708Z","published_at":"2023-11-09T18:34:55Z","references":["https://osv.dev/vulnerability/GHSA-4g88-4hgm-m99x","https://nvd.nist.gov/vuln/detail/CVE-2023-45884","https://github.com/nasa/openmct/pull/7148","https://github.com/nasa/openmct/pull/7148/commits/4e95e12559c9c5364269ff366a59768573baacb4","https://github.com/nasa/openmct","https://www.linkedin.com/pulse/xss-nasas-open-mct-v302-visionspace-technologies-ubg4f"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-4g88-4hgm-m99x","url":"https://osv.dev/vulnerability/GHSA-4g88-4hgm-m99x"}],"summary":"NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability"}