CVE-2025-28384 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
Critical CVSS: 9.1

CVE-2025-28384

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.
Vendor
Openc3
Product
Cosmos
CWE
CWE-22
Yayın Tarihi
2025-06-13 14:15:20
Güncelleme
2025-10-27 16:15:39
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-22 Cosmos CRITICAL Openc3 2025

Referanslar

https://github.com/OpenC3/cosmos/pull/1828 https://github.com/OpenC3/cosmos/pull/1828/commits/fc7e11310a7cdf9f1939886e1b29009db4d4b718 https://github.com/OpenC3/cosmos/releases/tag/v6.1.0 https://openc3.com/ https://visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework/