Description
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2022-21122 Vulnerability in npm package metacalc
CVE-2016-10027 Vulnerability in maven package org.igniterealtime.smack:smack-tcp
CVE-2018-3721 Vulnerability in maven package org.webjars.npm:lodash.mergewith
CVE-2021-41269 Vulnerability in maven package com.cronutils:cron-utils
CVE-2023-3308 Vulnerability in maven package com.whaleal.icefrog:icefrog-all