openc3 vulnerabilities (PyPI)
15 vulnerabilities.
-
openc3PyPI OpenC3 COSMOS: Administrative Actions via the Script Runner Tool 9.6 Critical -
openc3PyPI OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base 9.6 Critical -
openc3PyPI OpenC3 COSMOS: Self-XSS in the Command Sender 4.6 Medium -
openc3PyPI OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames 4.3 Medium -
openc3PyPI OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence 8.1 High -
openc3PyPI Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a... 9.8 Critical -
openc3PyPI OpenC3 COSMOS v6.0.0 was discovered to contain hardcoded credentials for the Service Account. 9.8 Critical -
openc3PyPI A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS... 9.8 Critical -
openc3PyPI OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint 9.1 Critical -
openc3PyPI OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint 7.5 High -
openc3PyPI A credential leak in OpenC3 COSMOS v6.0.0 allows attackers to access service credentials as... 7.5 High -
openc3PyPI A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS v6.0.0 allows attackers to execute... 6.1 Medium -
openc3PyPI OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`) 4.8 Medium -
openc3PyPI OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`) 5.3 Medium -
openc3PyPI OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`) 5.1 Medium