PT-2023-29485 · Openmct · Openmct

·

CVE-2023-45282

·

Published

2023-10-06

·

Updated

2024-12-13

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions openmct versions 2.2.5 through 3.1.0
Description The issue concerns a prototype pollution that can occur via an import action.
Recommendations For openmct versions 2.2.5 through 3.1.0, update to version 3.1.0 or later to resolve the issue.

Exploit

Fix

Prototype Pollution

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-45282
GHSA-4XCX-CWRQ-W792

Affected Products

Openmct