Description
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.
Remediation
References
https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7
https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies
Related Vulnerabilities
CVE-2018-12536 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2022-41250 Vulnerability in maven package com.meowlomo.jenkins:scm-httpclient
CVE-2020-15149 Vulnerability in npm package nodebb
CVE-2018-20677 Vulnerability in maven package org.webjars:bootstrap-sass
CVE-2020-14967 Vulnerability in maven package org.webjars.bower:jsrsasign