Description
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2017-2602 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2022-40764 Vulnerability in npm package snyk
CVE-2014-0121 Vulnerability in maven package io.hawt:hawtio-karaf-terminal
CVE-2020-28469 Vulnerability in maven package org.webjars.bowergithub.es128:glob-parent
CVE-2017-16137 Vulnerability in maven package org.webjars.npm:debug