PT-2023-29485 · Openmct · Openmct

·

CVE-2023-45282

·

Publicado

2023-10-06

·

Atualizado

2024-12-13

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions openmct versions 2.2.5 through 3.1.0
Description The issue concerns a prototype pollution that can occur via an import action.
Recommendations For openmct versions 2.2.5 through 3.1.0, update to version 3.1.0 or later to resolve the issue.

Exploit

Correção

Prototype Pollution

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-45282
GHSA-4XCX-CWRQ-W792

Produtos afetados

Openmct