216.73.216.197

CVE-2025-28380

· Published 13/06/2025 14:15 · Modified 13/06/2025 14:15

Labels: CVE-2025-28380 2025-06-13CVE-2025-28380[email protected]

Essential information

Published
13/06/2025 14:15
Modified
13/06/2025 14:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
openc3 / cosmos cpe:2.3:a:openc3:cosmos:6.0.0:*:*:*:*:*:*:*

References