GHSA-w4m2-qmh3-2g8f

ghsaUSosv

Yamcs Path Traversal vulnerability

view advisory published 2023-10-19Licence: CC-BY-4.0

Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-45277US	high7.5	1.22% (68th)	Exploit	2023-10-19
Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buc…

references

External citations — patches, advisories, analysis.

https://github.com/yamcs/yamcsPACKAGE
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-45277ADVISORY
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologiesWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan