GHSA-43fw-536j-w37j

ghsaUSosv

Yamcs API Directory Traversal vulnerability

view advisory published 2023-10-19Licence: CC-BY-4.0

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-45278US	critical9.1	1.83% (79th)	—	2023-10-19
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

references

External citations — patches, advisories, analysis.

https://github.com/yamcs/yamcsPACKAGE
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-45278ADVISORY
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologiesWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan