Authenticated users can achieve arbitrary code execution in OpenC3 COSMOS by writing malicious payloads into user-writable configuration overlays that are subsequently rendered as code by the application.
COSMOS +2
rce
authenticated-rce
openc3
xss
web-vulnerability
session-hijacking
5t
1c
updated