Openmct versions 1.3.0 to 1.7.7 are... CVE-2022-22126

4.3 AV AC AU C I A
发布: 2022-02-20
修订: 2024-11-21

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Web Page” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息