Description

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

Remediation

References

https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7

https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies

Related Vulnerabilities

CVE-2022-29894 Vulnerability in npm package strapi

CVE-2023-47323 Vulnerability in maven package org.silverpeas.core:silverpeas-core-api

CVE-2023-5654 Vulnerability in npm package react-devtools

CVE-2017-1000189 Vulnerability in npm package ejs

CVE-2023-38503 Vulnerability in npm package directus

Severity

Critical

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Tags

Patch Exploit Third Party Advisory