Loading HuntDB...

GHSA-cf8v-5mrc-jv7f

GitHub Security Advisory

OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

An issue in the openc3-api/tables endpoint of OpenC3 COSMOS 6.0.0 allows attackers to execute a directory traversal.

Affected Packages

RubyGems openc3-cosmos-tool-iframe

Related CVEs

Key Information

GHSA ID
GHSA-cf8v-5mrc-jv7f
Published
June 13, 2025 3:30 PM
Last Modified
June 17, 2025 7:59 PM
CVSS Score
7.5 /10
Primary Ecosystem
RubyGems
Primary Package
openc3-cosmos-tool-iframe
GitHub Reviewed
✓ Yes

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.