Threats tagged 'ghsa-p6w2-c4j5-7xhm'

Multiple vulnerabilities in NASA fprime-gds versions through 3.4.3 allow an unauthenticated remote attacker to execute arbitrary code on the ground station host and inject commands to connected spacecraft. The Flask application component does not enforce authentication on any endpoint, enabling this critical security risk.