CVE-2024-47529: GHSL-2024-127_GHSL-2024-129: Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in OpenC3 COSMOS - CVE-2024-43795, CVE-2024-46977, CVE-2024-47529
Summary OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting (see GHSL-2024-128).
Note: This CVE only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition
Impact This issue may lead to Information Disclosure.
Other sources
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. OpenC3 COSMOS stores the password of a user unencrypted in the LocalStorage of a web browser. This makes the user password susceptible to exfiltration via Cross-site scripting (see GHSL-2024-128). This vulnerability is fixed in 5.19.0. This only affects Open Source edition, and not OpenC3 COSMOS Enterprise Edition.
— MITRE
Several vulnerabilities were found in OpenC3 COSMOS, a web application that is used to control satellites and test equipment. They can lead up to Remote Code Execution (RCE) via cross-site scripting (XSS).
— GitHub Security Lab
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47529?
CVE-2024-47529 has a critical severity due to the unencrypted storage of user passwords in LocalStorage.
How do I fix CVE-2024-47529?
To fix CVE-2024-47529, upgrade to version 5.19.0 or later of the affected OpenC3 COSMOS software.
What impact does CVE-2024-47529 have on users?
CVE-2024-47529 exposes user passwords to potential exfiltration through Cross-site scripting attacks.
Which versions of OpenC3 COSMOS are affected by CVE-2024-47529?
CVE-2024-47529 affects all versions of OpenC3 COSMOS prior to 5.19.0.
Is CVE-2024-47529 applicable to the Open Source edition only?
Yes, CVE-2024-47529 only affects the Open Source edition of OpenC3 COSMOS and not the Enterprise version.