Skip to content
Threat Feed
Subscribe

Product

@Openc3/Vue-Common (>= 5.0.6, <= 7.2.1)

1 brief RSS
critical advisory

OpenC3 COSMOS Authenticated Remote Code Execution

Authenticated users can achieve arbitrary code execution in OpenC3 COSMOS by writing malicious payloads into user-writable configuration overlays that are subsequently rendered as code by the application.

COSMOS +2 rce authenticated-rce openc3 xss web-vulnerability session-hijacking
5t 1c updated