Description

Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.

Remediation

References

https://github.com/yamcs/yamcs/compare/yamcs-5.8.6...yamcs-5.8.7

https://www.linkedin.com/pulse/yamcs-vulnerability-assessment-visionspace-technologies

Related Vulnerabilities

CVE-2020-9480 Vulnerability in maven package org.apache.spark:spark-network-shuffle_2.10

CVE-2022-36895 Vulnerability in maven package com.compuware.jenkins:compuware-topaz-utilities

CVE-2021-23327 Vulnerability in maven package org.webjars.npm:apexcharts

CVE-2020-19850 Vulnerability in npm package directus

CVE-2021-46708 Vulnerability in npm package swagger-ui-dist

Severity

Critical

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Tags

Patch Exploit Third Party Advisory