Quick answers
- Is CVE-2023-45885 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2023-45885 being exploited in the wild.
- How severe is CVE-2023-45885?
- Low severity, with a CVSS score of 3.1, published 9 November 2023.
- Which products and versions are affected?
- Nasa Open MCT through 3.1.0; openmct (npm) SEMVER:introduced=0,last_affected=3.1.0.
- Is there a fix for CVE-2023-45885?
- A patch was published on 2023-10-23: Fix merged in release/3.1.1 branch via PR #7148 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2023-45885 attacked?
- It is attacked over the network.
- Am I affected by CVE-2023-45885?
- Check whether you run Nasa Open MCT or openmct (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A cross-site scripting (CWE-79) vulnerability exists in the flexibleLayout plugin's new component feature in NASA Open MCT versions up to 3.1.0. The vulnerability stems from insufficient input sanitization when handling component content, allowing an authenticated attacker to inject malicious JavaScript that executes in the context of other users' browsers. Attack preconditions include authentication (PR:L) and user interaction (UI:R) to view the crafted payload. The vulnerability has a network attack vector (AV:N) with low complexity (AC:L) and impacts confidentiality and integrity across security boundaries (S:C). A patch was implemented in the development branch via PR #7148, which adds eslint-plugin-no-unsanitized to enforce proper output encoding throughout the codebase.
Affected products
- NASA Open MCT through 3.1.0
Identifiers
- CVE-2023-45885
- GHSA-v8fc-qxvj-f3mg
Timeline
- 2023-11-09: disclosed
- 2023-10-23: patched: Fix merged in release/3.1.1 branch via PR #7148