Описание
NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
Пакеты
Наименование
openmct
npm
Затронутые версииВерсия исправления
<= 3.1.0
3.1.1
Связанные уязвимости
CVSS3: 6.5
nvd
около 2 лет назад
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.