Vulnerabilities in OpenC3
9 resultsCVE-2024-46977MEDIUMOpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`)EPSS 0.9%CVE-2025-68271CRITICALUnauthenticated Remote Code Execution in openc3-apiEPSS 0.5%CVE-2024-43795MEDIUMOpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`)EPSS 0.4%CVE-2024-47529MEDIUMOpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`)EPSS 0.3%CVE-2026-42088CRITICALOpenC3 COSMOS: Administrative Actions via the Script Runner ToolEPSS 0.3%CVE-2026-42087CRITICALOpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data BaseEPSS 0.3%CVE-2026-42085MEDIUMOpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenamesEPSS 0.3%CVE-2026-42084HIGHOpenC3 COSMOS: Hijacked session token can be used to reset password for persistenceEPSS 0.3%CVE-2026-42086MEDIUMOpenC3 COSMOS: Self-XSS in the Command SenderEPSS 0.2%