CVE-2023-45884: CSRF
Published Nov 9, 2023
·Updated
Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.
Affected Software
2 affected componentsFixes available
npm/openmct<=3.1.0
3.1.1
nasa openmct<=3.1.0
Event History
Nov 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Advisory Published
06:34 PM
Frequently Asked Questions
1
What is CVE-2023-45884?
CVE-2023-45884 is a Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through version 3.1.0.
2
How does CVE-2023-45884 affect NASA Open MCT?
CVE-2023-45884 allows attackers to view sensitive information via the flexibleLayout plugin in NASA Open MCT.
3
What is the severity of CVE-2023-45884?
CVE-2023-45884 has a severity rating of 6.5 (Medium).
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-45884?
The CWE for CVE-2023-45884 is CWE-352 (Cross-Site Request Forgery).
5
How can I learn more about CVE-2023-45884?
You can find more information about CVE-2023-45884 on the NVD website and the GitHub advisory page.